[wizofaus]

True, the best solution is to download the list of hashed "bad passwords" and check if the one entered matches against that.