[haarolean]

> password is provided to the server

No, it’s not? I can unlock my offline vault with no internet access at all.