Sign-in details beside the profile

Twenty accounts are twenty rows in a sheet that lives somewhere else, and walking over to it is the slowest part of the day. Here the pair sits on the profile that uses it, beside its one time code key.

A profile with something saved wears a small mark on its card in the list, so you can see which accounts still live in the spreadsheet.

• Login

  The name, the mail address or the phone the account answers to. A line break is stripped out: it breaks the form and the row alike.

• Password

  Kept exactly as typed, spaces at the edges included. Tidying those away is a silent way to break a sign in.

• Sign-in page

  The address you go to. It has to start with http or https, and anything else is refused as you save.

• Note

  The half sentence with nowhere else to live: the recovery mail, the seller, the day it was bought.

The list of profiles is drawn without it. What reaches the screen is the fact that a password exists, not the password.

The value itself comes down on a request of its own, and only when you press show or copy. Filling never brings it to the window at all: the main process reads it and writes it into the page.

An empty password box means leave it alone. Once the real password has been loaded into it, clearing the box drops the password and keeps the login.

The browser's own machinery writes the value, and the page receives the input and change events it waits for. It is not a keystroke per letter: a form counting keystrokes sees one write, not twelve.

The password field is picked by what the form calls it rather than by standing first. A sign-up form above the sign-in form keeps its own fields, and so does the search box at the top.

The window you are looking at is the one that gets filled, not the last one a flow opened. A profile launched without a window is filled just as quietly and is never pulled onto the screen.

A button that does nothing is worse than a button that says why. Each refusal below names its own reason on screen.

• ARMANOS Browser is open

  Filling reaches only the window the app draws itself, and this one is drawn by a separate process. The refusal says so and points you at copying.

• The profile is closed

  There is no window to fill, so the app asks you to open the profile first.

• Nothing is saved

  This profile has no pair yet, and the app says so instead of reporting a fill of nothing.

• No sign-in form

  The open page holds no form the rules accept, and not one field on it is touched.

The password does not lie in the profile file as text. The operating system seals it with the machinery that holds your other passwords, and the app carries no key of its own.

A key that ships inside a program is not a key, because everyone who downloads the program has it. So a value the system cannot seal is written as it was typed and never passed off as sealed.

While you are signed in, profile settings are mirrored through your account: name, group, scenario, fingerprint template, proxy, tags and notes. The pair is not among them, and no column exists on the server that could hold it.

Two roads take it off this machine, and you open both on purpose.