How does exposed passwords check work?

Clever…
Thanks for posting.