[pathikrit]

Is there a database of leaked passwords somewhere? I would simply enforce that your password is not in the leaks? Probably would capture the most common 100k passwords anyway this way?