AES-256-GCM encryption with Argon2id key derivation. Runs entirely in your browser — nothing is sent anywhere.