I´am not saying that you´re game is malware or it doesn't works to shame you or your work (your game seems really good in the itch.io scenes), yet credentials can be stolen in many ways and there is always a risk to get a substituted file in a server thats why I asked for other users experiences. And about NW.js whats the point of tell me that?