Thanks for your comment! When creating the encrypted URL, the password entry uses proper password fields, but the decryption prompt does not. I originally made

Thanks for your comment! When creating the encrypted URL, the password entry uses proper password fields, but the decryption prompt does not. I originally made the decryption password prompt use a JavaScript window.prompt because I didn't want to risk users' hints posing an XSS vulnerability. Unfortunately, that means entering the password in the prompt is not done with a proper password field, and is instead done in plaintext. Eventually, I hope to build out a better UI for decrypting links. Handling this is definitely on my list of planned improvements!