[ConservativeMind]

Palmer, you are using the company’s computer and the company’s browser. It is on the company’s network with the company’s backup methods. You even have to log in to everything with the company’s permission.

They have it all, Palmer.

[palmer]

Even if I used a company computer (not required) and the company backup (required in most cases), my private key remains encrypted in my browser store. My company cannot decrypt it from a backup of my drive / browser store.

As far as logging in, it doesn't matter if they require a domain login or not (I decided not to use domain login since I didn't need it). That's because the stores with the private keys are protected with a user's master key that the domain admins cannot access.

On government networks that I am familiar with, they use almost all Windows and domain logins with double encryption of the master key. Here's a doc explaining the implications: https://eca.orc.com/wp-content/uploads/ECA_Docs/IE_Instructions/Password_Tips.pdf Read "Seventh".