The message will be encrypted on the client side (iphone , android or PC ) , so the message sent over the network are already encrypted using the password provided by the user. So only when the user type in the correct password then he can decrypted it. If he forgot the password , so sad, the message cannot be read anymore.