Encrypted with your dashboard password — PBKDF2-SHA256 (600,000 rounds) + AES-256-GCM.
Nothing is stored on this device. Lock when you're done.