Comment by mmcnickle

The linked security blog post[1] has a lot more of the technical details and can clear up some of the questions/confusion that people have added in the comments.

[1]https://security.googleblog.com/2023/05/so-long-passwords-th...