AES-256-GCM with a random salt and IV, encrypted entirely in your browser. The same passphrase (and iterations) decrypts the JSON envelope on any device.