When users set a new password upon creating a new account, resetting a forgotten password, or changing the password through My Account Details, the platform will check the password against a database of known compromised passwords. If the password is found to have been previously compromised, the user is required to set a different password.