> Am I misunderstanding TFA or is the encryption done with the encryption key in the clear inside the browser? I'm struggling with a similar problem, and don't

> Am I misunderstanding TFA or is the encryption done with the encryption key in the clear inside the browser? I'm struggling with a similar problem, and don't see a more user-friendly way to do it. So far my flow is as follows: 1. User logs in and is prompted to create an encryption key using a password that they won't forget 2. Encryption key is created and wrapped using the password as part of the key material for the wrapping key 3. Wrapped encryption key is sent off to the DBMS. 4. Wrapped encryption key is fetched from DBMS and user is prompted for password to unwrap 5. Unwrapped encryption key is stored locally in order to encrypt and decrypt messages. I don't see any way to do it differently without either a) storing the unwrapping key password (in which case, why not store the key itself?), or b) asking for the unwrapping key password every time the key is used (which is super annoying). Assuming that I can't ask users to do any kind of key management themselves, is there a better option?