Pwned Passwords is a huge corpus of previously breached passwords made freely available to help services block them from being used again.