I signed up for haveibeenpwned’s notifications a long time ago, and the site doesn’t ask for passwords (just email addresses), which is not surprising to me, given the security philosophies Troy teaches at https://www.troyhunt.com/ and on social media. Since then, the site has alerted me to at least a couple of…