I am reading this as OP looking at password breach databases (which are, by definition, public and plaintext already), not OP running a service with password registration themselves.