Your vault is encrypted with AES-GCM (PBKDF2) and stored only on this device.
Sync stores only the encrypted blob in your private gist. There is no recovery โ if you
forget the master password, the data cannot be read. Use the same master password on every device.