Пароль можно проверить через api.pwnedpasswords.com отправляя 5 первых символов от sha1 пароля. https://haveibeenpwned.com/API/v2#PwnedPasswords

#!/bin/bash
read -sp 'Password: ' PASS
PASS_HASH=$(echo -n ${PASS}|openssl sha1 -r|sed -rn 's/^([A-Fa-f0-9]{15}).*/\1/p')
PASS="del"
(curl -s -XGET https://api.pwnedpasswords.com/range/${PASS_HASH:0:5}|grep -i ${PASS_HASH:5:10}) && echo "pwned!" || echo "OK"