Stored in this browser's local storage on this device — password is hashed (never stored in plain text). This is an access gate for a single-device tool, not a synced, multi-device login.