Threats SmartField Blocks

Keylogger Protection for Web Forms

Keyloggers capture every keystroke before it reaches the server. SmartField blocks keyboard event propagation with stopPropagation() inside a closed Shadow DOM. External keylogger scripts receive nothing.

Session Replay Safe Input Fields

Session replay tools record DOM content and user interactions. SmartField stores no real data in the DOM. The screen shows cipher characters. Replay recordings capture encrypted symbols.

XSS Resistant Input Fields

XSS attacks inject JavaScript that reads form values. SmartField returns encrypted payloads from .value. Even successful XSS attacks capture only AES-256-GCM encrypted data, useless without the server's RSA private key.

Browser Extension Safe Input Fields

Browser extensions have full access to page DOM and can read any standard input value. SmartField's closed Shadow DOM returns null for shadowRoot. Extensions cannot find, read, or modify the encrypted input.

Screen Recorder Safe Input Fields

Screen recorders capture what is visible on screen. SmartField displays animated cipher characters that change 8 times per second. When the page loses focus, all characters scramble instantly.

Clipboard Safe Input Fields

Clipboard attacks steal data through copy, paste, and drag events. SmartField blocks all clipboard operations with capture-phase event handlers. The clipboard never contains sensitive data.

Autofill Safe Input Fields

Browsers autofill and autosave form data, often sending it to third-party services. SmartField uses cipher characters that the browser saves instead of real data. Autofill captures encrypted symbols.

DOM Invisible Input Fields

Standard inputs store plaintext in the DOM. Any JavaScript can read it with querySelector. SmartField stores data in a WeakMap inside a closed Shadow DOM. innerHTML, textContent, and querySelector all return empty or null.

Anti-Bot Form Fields

Bots use Puppeteer, Selenium, and Playwright to fill and read forms. SmartField's closed Shadow DOM makes inputs invisible to querySelector. Bots cannot find, fill, or read the encrypted field. No CAPTCHA needed.

Anti-AI Form Fields

AI agents (GPT, Claude, Gemini, Grok) interact with web pages through DOM access. We tested all four against SmartField. None could read a single character. Shadow DOM, WeakMap, and encryption create an impenetrable barrier.

Anti Copy Paste Input Fields

Copy and paste operations can be intercepted by malicious scripts. SmartField blocks copy, cut, paste, select, selectstart, contextmenu, dragstart, drag, and drop events at the capture phase.

Anti Session Recording Input Fields

Hotjar, FullStory, Clarity, and LogRocket record user sessions. They capture DOM content, keystrokes, and form values. SmartField ensures they only capture cipher characters and encrypted payloads.