{ "id": "hibp", "status": "always-active", "type": "recommended", "title": "Refuse Compromised Passwords", "description": "Reject passwords that have appeared in password breaches tracked by haveibeenpwned.com. This is a secure API call that does not transmit complete, unhashed passwords.", "password-requirements": { "hibp": { "user-group": true } } }