It doesn't matter to a lot of the people that use it. I don't store their passwords and I pipe everything going on in the server to the user's web browser. Us

It doesn't matter to a lot of the people that use it. I don't store their passwords and I pipe everything going on in the server to the user's web browser. User's are invited to snoop TTY's. But yes I agree totally. It's meant to work with cloud servers so if you grow weary or distrustful of the box, tear it down and start over. One thing I've been playing with is API integration. Not that its any more secure, but I think fewer people would confuse an "API key" input field as a "Login here" form (which some have). Security aside, I'm slowly attempting to monetize this and to be quite honest I'm more interested in people giving me their money than their passwords. I can't pay rent with passwords.