Your password is transformed into a 256-bit cryptographic key using PBKDF2 with SHA-256 and 600,000 iterations, making brute-force attacks computationally infeasible.
Each encryption generates a unique 12-byte Initialization Vector using a cryptographically secure random number generator, ensuring identical messages produce different ciphertexts.
Galois/Counter Mode provides both confidentiality and authenticity. It encrypts your data and generates an authentication tag that detects any tampering.
All cryptographic operations use the browser's native Web Crypto API. Your messages and passwords never leave your device — zero server communication.