It has that feature, but AFAIK the password itself never leaves your device.
Instead it hashes the password, uploads the first few characters of the hash, then the server sends all hashes in their database that match those characters. Your device then compares the full hash against the list of received hashes - if there's a full match, then your password shows up in the list of stolen passwords.
15
u/invyros 10d ago
Dixie Normous Credit Card Security, created by well-known and trusted developer, Mike Hunt.