Password Breach Alert is a Devise extension that adds 1) server-side check of password strength before registration, using a list of common passwords, zxcvbn and haveibeenpwned; 2) a way to check users emails against recent verified security breaches, and implement different customized policies.