One clever UI way around this would be to not use Enter in the master password field. Instead use something on the homerow like "jkl" to end every password. Th

One clever UI way around this would be to not use Enter in the master password field. Instead use something on the homerow like "jkl" to end every password. Then the input field just accepts whenever /.*jkl/ matches. This mostly solves the "wrong focus" problem because hitting Enter is no longer part of the muscle memory. Of course you could still enter it into a shared Google doc or something else that discloses without Enter, so it's only a partial solution.