Is there documentation on how this works on ACF2 sites?
Vendor documentation
1-) Document referencing vendor documentation describing how the different authentication method(s) used can protect passwords during:
2-) Document describing the specific settings selected for the different authentication method(s) used to protect passwords during: