The current behavior is to save the decryption password in the browser's indexed db. This is a good solution for most users, but some may want to type the password every time they open the app, and have it live only in memory, while the application is open.