Real registration, real screening
Create a demo account
A real account on the provider. Same code path as production, breach screening included.
Try to break it
Enter a password you know has been breached. Password123! works, and it'll be refused.
Passwords are screened against Have I Been Pwned using k-anonymity, so the password itself never leaves the server. Over 72 characters is also out.