The master password prompt can pop up over any browsing window, and looks very basic. I can see that the pop-up is modal (you can't swap to a different tab for instance when it is up), but I would think basic users would not know how to check this. It would be *VERY* easy for hackers to exploit this and throw up a similar looking popup whenever they see a Firefox browser, and capture someone's password. You need to put something on this pop-up that gives users confidence that they are entering a password into Lockwise, and not just a page pop-up. Otherwise a great product!