Complex sentence: This decryption takes place client-side in a web browser and uses the mailbox password which is known only to the user.
Split into simpler sentences: This decryption takes place client-side in a web browser. The second password is known only to the user.