I'm not an expert, but you could integrate DBs like https://haveibeenpwned.com/Passwords https://haveibeenpwned.com/Passwords to make sure users don't use expos

I'm not an expert, but you could integrate DBs like https://haveibeenpwned.com/Passwords https://haveibeenpwned.com/Passwords to make sure users don't use exposed passwords?