You don't need to download them from HIBP. You can freely download all major breach databases from databases.today. There really aren't many passwords not repre

You don't need to download them from HIBP. You can freely download all major breach databases from databases.today. There really aren't many passwords not represented in those databases which are present in others, but for everything else you can just automatically download grab dumpmon like Hunt does. Also, try google dorking site:vk.com/doc and "@gmail.com"...there are many large password and email databases you can find that way which have not been publicized. This includes many which are not in HIBP. I've tried to call attention to this before but there isn't an active effort to crawl these. Once you download, normalize and deduplicate the entire corpus of password databases, you can find matches in real time for e.g. signup requests.