Credentials are not shared under the hibp password system. the first five characters of the hex encoded md5 of the password is shared and the server responds wi

Credentials are not shared under the hibp password system. the first five characters of the hex encoded md5 of the password is shared and the server responds with matching hashes. If 20 bits (2 and a half characters) of hashed entropy can compromise your password you have bigger problems.