Devise extension that checks user passwords against the PwnedPasswords dataset https://haveibeenpwned.com/Passwords.

Keeps passwords from being easily hackable.

In Devise you own controllers, models and views. With Booth you don't own the models (much like ActiveStorage). The Controllers you do own, but the implementation is pretty much just calling Booth helpers. The views you own completely, just as in Devise.

Password Breach Alert is a Devise extension that adds 1) server-side check of password strength before registration, using a list of common passwords, zxcvbn and haveibeenpwned; 2) a way to check users emails against recent verified security breaches, and implement different customized policies.

Rodauth extension for checking whether a password had been exposed in a database breach according to https://haveibeenpwned.com.