Saving password in browser

[Iskander1220]

Hello! When a user successfully enters their password into the form, the browser does not display the standard prompt to save the password. I wondered: is the program code specifically configured so that the password is not saved?

In my project, I modify the code slightly so that this prompt is displayed and the password is saved in sessionStorage.

[Greenheart]

The password is saved in sessionStorage as you can find in

pagecrypt/web/decrypt.ts

Lines 176 to 177 in 0c51036

	// If no exception were thrown, decryption succeded and we can save the key.
	sessionStorage.k = JSON.stringify(await subtle.exportKey('jwk', key))

.

The browser's built-in autofill feature has been disabled though.

[Iskander1220]

When I tested it in Chrome and Brave browsers, there were no signs of a saved password. There were no notifications or password substitution in the form.

[madflier]

The entire password screen will be bypassed if the webapp has saved a correct password previously. Note that every time you regenerate the page, this password will be lost from memory because the hash is regenerated (and so the saved credentials no longer correspond and are deleted). Hence the `#password` method for providing the password in the URL for friction free login. I suspect you are mutating the page?

…

On Wed, 4 Feb 2026, 4:35 am Iskander1220, ***@***.***> wrote: *Iskander1220* left a comment (Greenheart/pagecrypt#65) <#65 (comment)> When I tested it in Chrome and Brave browsers, there were no signs of a saved password. There were no notifications or password substitution in the form. — Reply to this email directly, view it on GitHub <#65 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ANDNSGTW4WGIGDNGKLDFBJD4KFZKRAVCNFSM6AAAAACTZ7C2UCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTQNBVGE4TMOBZGE> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>