[monicaincog]

noted. in the coming weeks we'll be more transparent about the tech stack.

in the meanwhile, sure, we don't store private keys on the server side :)

[imuli]

In the login response I see the private key being sent back from the server, it looks like it is encrypted with a key derived from the user's password. 100100 iterations of PBKDF2-SHA512 is certainly better than it could be, but not it's certainly not as secure against brute force attacks as Argon2 or any other modern KDF.