Your logins are encrypted end-to-end, with a key that Mozilla's server don't have.

You can find more about how sign-in and key management works in https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc...