Password breach check via Have I Been Pwned, HIBP API, k-anonymity, SHA-1 hash prefix lookup, known compromised passwords. Privacy-safe: only hash prefix sent.