Set a passphrase
The passphrase only ever exists in this browser. The server receives a verifier that cannot be reversed into the passphrase, so it cannot read any message.
Forget the passphrase and the history is gone โ there is no backdoor that can open it.
Enter passphrase
The key is re-derived in your browser; the server only checks that it matches the one created at setup.