So I've only been looking at these things for around 20 minutes.
What I can make out of Rainbow tables and hashes are that the rainbow table is a huge list of different hashes and it's possible to use that list in programs to try and find a match to the password hash.

It seems like this method is only used for simple and not very secure websites, right?

Thanks in advance for any help and advice.