Add password suggestions and strength estimations using zxcvbn
Having strength recommendations on the change password page will help with making sure users chooses secure passwords.
Presentation by our very own Jen Zajac about using zxcvbn.
Integrating Have I Been Pwned using the API would be really cool as well.