passphrase kept in cleartext by default in browser localstorage

[radiumsoup]

passphrase needs to be encrypted by default, with an optional password for extra security. none of this cleartext in localstorage bullshit