What's changed
Leaked passwords are the first ones attackers try against any site, even when they look strong.
Your password never leaves your browser: only the first 5 characters of a one-way fingerprint of it are sent, which matches hundreds of other passwords, and the final comparison happens on your device.
Passwords you already use keep working. The check only runs when a new password is set.