Zero-knowledge encryption may not stop password theft if servers are hacked (techxplore.com)