Hacker News Reader

Interesting, thanks for saying something.

I'm also not a web dev, but I think I can manage to clear out the password once the secret is decrypted successfully.

or use <input type="password"> ? But then one can't read the password as one types.

Change it to text on focus, password on blur. It will still be in the history though… clearing it on submit makes the most sense.

changing the type of the input from text to password will help. also the required attribute does nothing in html if the input is not part of a form.