[albertgoeswoof]

If you’re going to need a service like this to validate your passwords, it’s probably easier for you to use an oAuth provider (eg Facebook) or mangaged auth provider like auth0, firebase etc. And let them handle it.

[estroz]

Ideally that's what site owners should lean towards. However OAuth is a problem for users who don't have accounts with offered providers.