New:
"Not saved here" reminder. When you reach a login page for a site you don't have saved (and it isn't a sign-up form), the extension now shows a prompt — "I don't have this website saved. You should save it in the app." — with an Open app button to add it yourself, and Dismiss.

Security
The extension no longer captures or stores any credential. The previous "save this login after you submit" behavior — which briefly held a typed password in the background — has been removed entirely. Passwords are now only ever fetched on demand and passed straight to the page; nothing is cached by the extension, in memory or in session storage.
An account is now saved only deliberately: through the Generate & fill flow on a sign-up page, where you choose to save the new login.

Changed:
Logging into an existing account on a new site no longer triggers an automatic save prompt. Use Open app from the new reminder to add the account in Secure Vault instead.
Compatibility
Pairs with the Secure Vault desktop app over the same token-authenticated 127.0.0.1 link. No remote servers; all data stays local.