It would be nice for a box to pop up if the key is not detected in the hash, asking for the decryption key (and password if that's set). That way, you enable t

It would be nice for a box to pop up if the key is not detected in the hash, asking for the decryption key (and password if that's set). That way, you enable two types of users: * The "I just don't want the server to have this stored in plaintext" type. * The "I'll send you the URL now and the key via some secure channel" type. Also, if you browse incognito, then there shouldn't be a browser history containing the keys.