Passit will only run when requested via clicking the icon or keyboard shortcut (defaults to ctrl-shift-L). This greatly lowers the potential attack surface of Passit making it easier to keep safe and secure. It also means Passit will never "annoy" the user with popups. It's possible that in the future, we add alternative means of creating new passwords within the popup.

We just released 1.10 today with backup codes that you can print out or save in a secure location. Just go to account, change backup code. Passit encrypts your passwords in a way where we can't see them even if we wanted to. This requires you to have your own backup code.