What it does
Creates a one-way bcrypt hash of a password, and can check whether a password matches an existing hash.
How it's safe
Hashing and verification run locally. Nothing is uploaded. Bcrypt is designed to be slow on purpose, which makes guessing harder.
Watch out
Bcrypt is for passwords you want to check later — not for encrypting files you need to recover. You cannot reverse a hash back into the password.