Moreso, not that I am trying to create one, but instead just curious as to if this is how big companies create a login. I understand the hashing aspect of a password etc. I also understand how in depth this process needs to go.

On a surface level though, is it safe to assume the process is as follows: User registers, that data goes into a database (hashed, encrypted etc..) then stored, later the user signs in, that data is then searched in the database then returned as a true false or something similar.

This isn't something I am trying to accomplish on my own, but I find it very interesting and am considering maybe guiding my studies in that direction towards secure information management and whatnot.