I think the "client" here is the application server, not the web browser.
Having the key derived from your password is also possible, but I think not really that secure.
SpiderOak and Mega deal with this problem as they have e2e encrypted file storage