Passwords here are checked for known leaks entirely at the reverse proxy layer — this backend has no idea it's happening.
More about this demo