Great enhancement and well made

This seems to work very well, at least no issues – immediate or long term. A client user was very surprised that “WordPress” could know their password was “pwned”, but thankful for the reminder.

Beware that if you deactivate this plugin, users have to reset their passwords. So just keep it – for the enhanced security through a modern and relatively simple plugin.

Should be added to core, IMO.