End-to-end encrypted. Your key is derived from your password in this browser and never leaves it; Stera relays only ciphertext it cannot read.