I'm not vulnerable to phishing anymore, because I use a password manager. If it doesn't submit a password, I know I'm on the wrong website. A big chunk of thes

I'm not vulnerable to phishing anymore, because I use a password manager. If it doesn't submit a password, I know I'm on the wrong website. A big chunk of these problems (and phishing in general) would go away if users weren't responsible for authenticating websites by looking at the URL. Good, portable password management needs to become more common.