Passwords are not stored in the firefox extension, they are stored encrypted server side. The firefox extension is there make sure the cryptographic library (openpgp.js) cannot be tampered with (via MiM/XSS for example).