[nickbw]

That's the point. :)

Your password is never sent to the server or stored in any cookies. You have to enter it every time because it only lives in browser memory while you view the page.

A cute side-effect of this is that you can chat with yourself under two different names by opening the same chat in multiple tabs. (You can also try chatting with two different passwords to watch the decryption fail.)