Put in a secret, an otpauth link or a QR image — nothing ever leaves this browser.
Codes
Input
Name: SECRET
otpauth://…
#
All input formats
Ctrl+V
otpauth-migration://
Vault
Off — nothing is stored
By default Clockwork stores nothing. If you switch the vault on, the input here is encrypted with your passphrase — without it, the stored block is worthless.
All details
The key comes from your passphrase via PBKDF2-SHA-256 with 600,000 iterations; AES-256-GCM does the encrypting. Only the sealed envelope is stored — never plaintext, never the passphrase, never the derived key.