Your password is never stored on the server. The encryption key is generated temporarily for each request and wiped from memory immediately. Only you have the password, so only you can decrypt.