I did a little digging on this today. There is a crypto API that can be used clients side but the problem is key storage. You can store that in indexdb but thats not all that great. I am going to dig on this more and see if these apps are doing any of that or if they are storing it server side. If I get the time I'll do a write up on what I find.