In this regard envkey is much like 1password or lastpass, the server never knows the contents of your vault.