No password is typed here and your key never leaves this machine. The server hands you a one-time challenge, you sign it locally, and only the signature goes back.
Challenge
—
Valid for two minutes and usable once. Reloading this page mints a new one.