passwords leak because they're stored in a database at each different website nsecs never leave your device