Hey, all of your tokens are encrypted with a key, that only you have access to. So in the case of a security breach, the attacker would only be able to access encrypted data.

Our architecture[1] is similar to that of password managers, and we've been externally audited[2].

[1]: https://ente.io/architecture

[2]: https://ente.io/blog/cryptography-audit/