AES-256-GCM — Industry-standard symmetric encryption. Your passphrase is stretched via PBKDF2 (100,000 rounds, SHA-256). A random salt and IV are prepended to the output so every encryption is unique. All processing is in your browser — nothing is sent anywhere.