and how users can protect themselves from being on such a list.
Google’s infrastructure is the gold standard for anti-brute-force defense. Even if you had a txt file with 10 million potential passwords for a single account: gmail password list txt