diff --git a/js/app.autofill.js b/js/app.autofill.js
index 0944a2a..8a04c60 100644
--- a/js/app.autofill.js
+++ b/js/app.autofill.js
@@ -239,8 +239,11 @@ async function autofillFillEntry(entry, kind) {
     // password-only kind → empty username → Delphi skips Tab.
     // full kind with empty entry.username → also no Tab (Delphi handles it).
     const user = (kind === 'password') ? '' : (entry.username || '');
+    // Toast deferred to Bridge.onAutofillResult — no success lie when the
+    // target runs elevated (UIPI drops the keystrokes).
+    autofillPendingToast = (kind === 'password' ? 'Password filled: ' : 'Autofilled: ')
+        + entryDisplayName(entry);
     Bridge.executeAutofill(user, password);
-    toast((kind === 'password' ? 'Password filled: ' : 'Autofilled: ') + entry.site);
     // Audit (best-effort, ignore failures)
     fetch('' + '/audit', {
         method: 'POST',