They're using key-stretching to mitigate the use of bad passphrases, though reuse will still be an issue. https://wiki.mozilla.org/Identity/AttachedServices/Ke

They're using key-stretching to mitigate the use of bad passphrases, though reuse will still be an issue. https://wiki.mozilla.org/Identity/AttachedServices/KeyServerProtocol#Client-Side_Key_Stretching https://wiki.mozilla.org/Identity/AttachedServices/KeyServer... And RSA is deterministic.