From c80876ed71b46468b3a7fe9bf2c12893c689a250 Mon Sep 17 00:00:00 2001
From: ggorlen <gsgorlen@gmail.com>
Date: Tue, 24 Jan 2023 11:58:20 -0800
Subject: [PATCH 1/2] Use password type for inputs

---
 creator/index.html           | 7 ++++---
 creator/secret-template.html | 2 +-
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/creator/index.html b/creator/index.html
index e4c4023..8967116 100644
--- a/creator/index.html
+++ b/creator/index.html
@@ -319,11 +319,12 @@ <h1><a href="https://mprimi.github.io/portable-secret/">Portable Secret</a>: Sec
   </div>
 
   <div>
-    Password:<br>
-    <input type="text" id="password" value="banana" required>
+    <label>
+      Password:<br>
+      <input type="password" id="password" value="banana" required>
+    </label>
   </div>
 
-
   <div>
     Password hint:<br>
     <textarea rows="8" cols="80" id="password_hint" required>A yellow elongated fruit (technically a berry!)
diff --git a/creator/secret-template.html b/creator/secret-template.html
index dc36967..9fd815e 100644
--- a/creator/secret-template.html
+++ b/creator/secret-template.html
@@ -230,7 +230,7 @@ <h4>Password hint:</h4>
 
   <div>
     <h4>Password:</h4>
-    <input type="text" id="password" placeholder="See hint above" class="password_input" required>
+    <input type="password" id="password" placeholder="See hint above" class="password_input" required>
   </div>
 
   <div>

From cfcd01c85d628ad446d700a98a0ddc66d31111fa Mon Sep 17 00:00:00 2001
From: ggorlen <gsgorlen@gmail.com>
Date: Tue, 24 Jan 2023 12:24:17 -0800
Subject: [PATCH 2/2] Add password confirmation

---
 creator/index.html | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/creator/index.html b/creator/index.html
index 8967116..d332208 100644
--- a/creator/index.html
+++ b/creator/index.html
@@ -61,12 +61,19 @@
 
     setMessage("⏳ Importing key...")
 
-    // Whatever array of bytes is in the password field
-    let password = new TextEncoder().encode(document.getElementById("password").value)
+    const passwordEl = document.getElementById("password")
+    const passwordConfirmEl = document.getElementById("password-confirm")
+
+    // Whatever arrays of bytes are in the password fields
+    const password = new TextEncoder().encode(passwordEl.value)
+    const passwordConfirm = new TextEncoder().encode(passwordConfirmEl.value)
 
     if (password.length == 0) {
       throw new Error(`Empty password`)
     }
+    else if (passwordEl.value !== passwordConfirmEl.value) {
+      throw new Error(`Passwords must match`)
+    }
 
     // Import password into a Key suitable for use with Cryptography APIs
     let passwordKey = await window.crypto.subtle.importKey(
@@ -324,6 +331,12 @@ <h1><a href="https://mprimi.github.io/portable-secret/">Portable Secret</a>: Sec
       <input type="password" id="password" value="banana" required>
     </label>
   </div>
+  <div>
+    <label>
+      Confirm Password:<br>
+      <input type="password" id="password-confirm" value="banana" required>
+    </label>
+  </div>
 
   <div>
     Password hint:<br>