I appreciate your good intentions but please don't teach users to type their passwords (not even for localhost, password reuse is a thing) to a random website.

I appreciate your good intentions but please don't teach users to type their passwords (not even for localhost, password reuse is a thing) to a random website. Even if everything is local, there are no indicators in the browser that this is so (like a network permission on Android). Even if it's local now, think who will buy the domain in 5 years once you move on and lose interest. That said, if you don't let the user put in a password and just output a placeholder, sure, nice project :thumbs up:.