Secrets are encrypted in your browser before anything is sent. The server stores ciphertext only.