Quick question for the author in case they are here

> encryption key is derived from the password > One can use the passphrase in case password is lost

What does this really means? is the password encrypted with these pass phrases instead of being hashed?