Checks against server. Gates upload, list, and media. Never used to encrypt images.

Stored in browser only (localStorage). Never sent to server. Encrypt on upload, decrypt when viewing .enc files.