{
  "id": "hibp",
  "status": "always-active",
  "type": "recommended",
  "title": "Refuse Compromised Passwords",
  "description": "Reject passwords that have appeared in password breaches tracked by haveibeenpwned.com. This is a secure API call that does not transmit complete, unhashed passwords.",
  "password-requirements": {
    "hibp": {
      "user-group": true
    }
  }
}