Your password never leaves the browser. All cryptographic operations happen locally — nothing reaches the server unencrypted.