The encryption happens in a browser extension or mobile app, or in client-side Javascript in the case of accessing it directly through their website.