The cipher algorithm uses the master password to encrypt and decrypt your passwords.
The server stores only your encrypted passwords which are impossible to decrypt without your master password
GOOD TO KNOW
Your master password will never be sent
to the server nor will be stored its raw format!
It remains in secrecy in your browser's memory until you close this tab or the timelock expires.
Your passwords are protected by both your Google account and a master password
The app uses the industry standard AES cipher with 128, 192 or 256 bit encryption
of your choice.
Check the source code on GitHub
and verify what I promise!
If you forget your master password, nobody is going to be able to decrypt your stored passwords.