diff --git a/universal-runtime/manager.py b/universal-runtime/manager.py
index fc0de6e..e78d1b8 100644
--- a/universal-runtime/manager.py
+++ b/universal-runtime/manager.py
@@ -95,7 +95,7 @@ _AUTOFILL_CONTENT_JS = r"""
     for (const el of list) {
       if (isVisible(el)) return el;
     }
-    return list[0] || null;
+    return null;
   }
 
   function setNativeValue(el, v) {
@@ -115,6 +115,8 @@ _AUTOFILL_CONTENT_JS = r"""
 
   function tryFill() {
     const p = findPassField();
+    // No visible password field = not a login form; stop to avoid filling app inputs
+    if (!p) return;
     const u = findUserField(p);
     // Fill login FIRST so password-triggered re-render doesn't clear it
     if (CREDS.login && u) {