jm 5úXÿSûxwíÊ|£BfÜe£¸åO÷§§ÛLAFAIK only the PW is local, and signing is done via conjunction of the server key and PW. I think changing your PW would shut-off compromised browsers.
https://whatsonchain.com/tx/882f054b3b0b7311f8f4733ac90e400531a9fb6eabd2f2239d9bccd3613e66e2