Messages are encrypted on your device. The server only stores ciphertext.
Use a long passphrase when you can. A 6-digit PIN is easier on mobile but weaker — only share it with people you trust.
Same key on every device = same channel. Wrong key = unreadable messages.