Your message is fully encrypted in your browser. The server never sees the contents or the password. A secure link is created, usable only once or until it expires. After that, it's gone for good.