Your message is encrypted in your browser before being sent. The server never sees your password or plaintext.