How safe is cryptomator? How strong its encryption?

Let me ask this… where do you store your password? If found by the attacker, there would be little need for brute force.

And the keyfile? Do you store it unencrypted with the vault?