AD Connect Sync synchronizes user passwords using password hooks. When a user changes its password in the source Active Directory, the password hook intercepts the change and securely transmits the updated password to the destination Active Directory over a secure channel. As a result, the corresponding user object in the destination directory is updated with the new password.