That's a fair point. I originally made this wallet just for myself, so I ignored some standard practices. Now you only need a username to log in to the wallet. A key is only required when performing certain actions.