How does Kaspersky Password Manager work?

Question

Information Security

How does this password vault work technically? This means why the user of this program does not have to worry that his master password, which is the key to all other passwords, will not be cracked; what if the computer is hacked (RAT for example) at the time when the vault is unlocked?
I googled and found this article:

The master password itself is not stored in the program's memory. Moreover, even with an open database, account passwords are still encrypted. To decrypt the information, a key formed from the master password is used. This key is stored inside the Windows Crypto API system and Windows is responsible for it. To decrypt the password, the encrypted block is sent to the Crypto API, and only then does Kaspersky Password Manager receive the decrypted information.

What does it mean?
Thanks in advance for your replies.

Answer 1

1. Lemma: any area of ​​memory can be read.
2. The mechanism is based on asymmetric and symmetric encryption.
3. The most secure password is the correct answer, formed according to a formula known only to you and the server, to a random request received from the server.
Example: the server and you know the formula (I gave the maximum simple version): a%100+2 the
server generates `a` for you: 154
you answer the server: 154%100+2=56 (the calculation is carried out in an information-isolated environment, from the working ; for example, using a piece of paper and a pencil)
the server checks: counted[154%100+2]==sent[56] => 56==56 => TRUE
if equal: the server says that the answer is correct and allows
if NOT equal : server generates a new random number
In any case, I would not recommend using any Password Managers.
Because to steal passwords from storage - there is a probability, and to recover them in case of failure - the probability is zero.