Your data is encrypted with a key derived from your passphrase — signing in is step one, unlocking is step two.