They only store an email address and let you know if that email address ever appears in a breach. They don't know your password, they're not asking for your password, and they're not interested in your password.

Also, knowing your password wouldn't be enough to identify it within a breach, assuming that the breached website does the bare minimum to store them safely (as in, uses a salt).

How about reading a thing or two before jumping to conclusions?