Thank you for your review.

I'm aware of this problem, but am currently lacking time to implement such a large change. See https://github.com/simu/passwordhasherplus/issues/3 for an ongoing(ish) discussion on the topic of hiding the master password from the web page.