They are encrypting it locally. It isn&#x27;t anything to doubt- it&#x27;s been shown time and time again.<p>Nowhere in the payload that gets sent to them is your key. The only way you could consider your passwords compromised is if you think there&#x27;s already a rainbow table out there to decrypt everything, which is ludicrous.