That's why I chose JS and to distribute it as ready-to-run app with app.js. Everyone should check the code and make sure I am not doing nasty things with their passwords.