> Your emails and data are encrypted from the beginning with a secret phrase that never leaves your computer.
Do you use a browser plugin?
Do you use a browser plugin?
If the server got hacked, could it send Javascript that steals a users password (which you say "never leaves your computer"), decrypts user data, and sends the password and the data to the attacker?