AES-256-GCMPassphrase + PBKDF2 key derivation, local encrypt/decrypt.AES-256-GCM: random salt + PBKDF2 (120,000 iterations, SHA-256) derives the key in your browser only.PassphrasePlaintextEncryptCiphertext (Base64: salt ∥ IV ∥ data)DecryptCopy ciphertext