Web vault decryption

Just confused… Maybe I’m getting something wrong but how is the vault decrypted in the web interface?
I thought all decryption is done locally on the clients machine, how is this done in web vault which is an online service?

The web page loads a JavaScript application that handles it locally, so it’s all on-device.


This makes sense, thanks for the explanation.