I think he got it mixed up. Only the database would be leaked, but not the master password. However I understand the the clientside decryption is done when usin

I think he got it mixed up. Only the database would be leaked, but not the master password. However I understand the the clientside decryption is done when using their addon, but I'm not sure how it works if you go via the webportal.