Passit will only run when requested via clicking the icon or keyboard shortcut (defaults to ctrl-shift-L). This greatly lowers the potential attack surface of Passit making it easier to keep safe and secure. It also means Passit will never "annoy" the user with popups. It's possible that in the future, we add alternative means of creating new passwords within the popup.