Runs entirely on your machine. Session timeout is 30 minutes of inactivity. After signing in, you can enable TOTP 2FA from Security settings.