diff --git a/todo.md b/todo.md
index 1680040..7f5c6d0 100644
--- a/todo.md
+++ b/todo.md
@@ -14,5 +14,3 @@
   is wrong when domain stuff breaks.
 * Responses to unauthorized requests are leaking information about the current
   tunnels through the genereated CSS.
-* The act of refreshing a page can delete tunnels created by other UI
-  sessions, I think because it has local CSS checkbox state.
diff --git a/webui/index.tmpl b/webui/index.tmpl
index 460ec18..ac6fe68 100644
--- a/webui/index.tmpl
+++ b/webui/index.tmpl
@@ -21,7 +21,7 @@
         <div class='content'>
           <div class='list'>
             {{range $domain, $tunnel:= .Tunnels}}
-            <input type='checkbox' class='toggle' id='toggle-tunnel-hide-deleted-{{$tunnel.CssId}}'>
+            <input autocomplete='off' type='checkbox' class='toggle' id='toggle-tunnel-hide-deleted-{{$tunnel.CssId}}'>
             <div class='list-item'>
               <div>
                 <a href="https://{{$domain}}">{{$domain}}</a>:{{$tunnel.TunnelPort}} -> {{$tunnel.ClientName}}:{{$tunnel.ClientPort}}
@@ -32,7 +32,7 @@
               </label>
             </div>
 
-            <input type='checkbox' id='toggle-tunnel-delete-dialog-{{$tunnel.CssId}}'>
+            <input autocomplete='off' type='checkbox' id='toggle-tunnel-delete-dialog-{{$tunnel.CssId}}'>
             <div class='confirm-dialog'>
               <label for='toggle-tunnel-delete-dialog-{{$tunnel.CssId}}' class='confirm-dialog__overlay'></label>