[SOLVED] How does Chrome know which passwords have been compromised?

[phaelax]

Wasn't sure which board to post this question.
Majority of my passwords are unique for each site, so if something is breached it can't cascade to other accounts. When I log into one particular site using Chrome, I get an alert telling me my password was found in a data breach and should be changed. Are they basing this from the site address I'm logging into? Or is Chrome sending my password back to google servers to do this lookup?

 

[velocityg4]

They compare your stored username and password on sites against lists of known compromised usernames and passwords. So, change the password when it comes up.

https://security.googleblog.com/2020/10/new-password-protections-and-more-in.html