Idea: add SSL and client-side symmetric key cryptography, while not saving the passphrase anywhere.
I need to study more about symmetric key cryptography. Any good hints from where to learn about it the best.
It shouldn't be too hard to find a JS implementation. For instance: https://github.com/mdp/gibberish-aes