NO ONE should trust a website delivering JS that could do who-knows what the next time they skip reading the code. Like, send the inputs to a third party.

Please delete this project and your comment.

If you want to be helpful, write native code that user can read, compile, and install, and persistently use without risk of backdoor-out-of-the blue.

Do you read your password manager's code every time it updates? Probably not, because you trust the author's reputation.

I wouldn't trust this page with my passwords either, but not because of the reasons that you mention. I haven't checked, but maybe it is simple enough to read the code in its entirety and then self-host? If so, nothing wrong with that.

It's hosted on GitHub Pages so you don't need to check if the code has changed. Just look for any commits. From what I can see, the last one was three months ago

That assumes that the code was honorable in the first place. I think you have to assume that this was not posted by someone with honorable intentions.

I forge git commits now and then so I know this but maybe it is not common knowledge. Git commits can be forged.

Content and dates can be changed.

Very rude comment imho.

Do 1password/lastpass extensions not include remote code/resources? Of course they do.

1. You can fork this repository and do whatever you want with it (e.g., self-host). The license is public domain.

2. If you save this page to your disk, everything will still work offline.

It's a cool idea, all you need to remember is the service and the master password.

But you need to make it easy to run on a local computer to convince the die hards. ;)

idk why this got downvoted.

You created something cool and it pays tribute to a loved one.

Awesome.

I like this, but it needs to be an offline cli before I would use it :)