Design

A while ago someone wrote in with a question that looked simple: What does Active Sites (##/30) mean? And if I reach 30, will it stop saving? Two questions. The first one was easy. The second one was the problem — because the honest answer was yes. Once Form Recover had drafts saved on 30 different sites, the 31st site was refused. You could open a form there, type a long reply, and nothing was kept. An extension whose entire job is not losing your work was quietly deciding not to do its job.

A form recovery extension is designed to be your safety net, catching the text you type so you never lose a draft again. But a safety net shouldn’t be a fishing net—it shouldn’t just grab everything in its path. To remain secure, a well-designed extension must have strict boundaries. At Form Recover, we believe there are three specific “No-Fly Zones” that an extension should never touch. 1. Password Fields (type="password") This is the most obvious rule, but also the most critical. Any extension that attempts to save data from a field where the characters are obscured (dots or asterisks) is a security risk.