We check passwords against the haveibeenpwned.com library of compromised passwords, and we check the strength of your password using zxcvbn.