Your passphrase and token stay in memory for this session only — never written to disk or browser storage.