[lsferreira42]

It's a valid concern, but i can't see how i can approach that, because in the end with this running on my server i can be watching in many ways.

I think the best option here is to maintain a cli version, that's something i've been thinking about.

[pkd]

You could use something similar to the k-anonymity approach from haveibeenpwned: https://blog.cloudflare.com/validating-leaked-passwords-with...