@falcon @glyph @whitequark @mcc The topic was not whether the pasting side should disallow pasting password (absolutely not, and browsers should fix the design bug that lets them by making paste indistinguishable by js from typing), but whether copy fron pw manager should be used/allowed vs auto entry (generally no; need for c&p should be a huge red flag).