Even for a cloud-based manager like Lastpass, you would have 2FA turned on, so an attacker with just your master password still wouldn't be able to log in. (Al

Even for a cloud-based manager like Lastpass, you would have 2FA turned on, so an attacker with just your master password still wouldn't be able to log in. (Although obviously you would still change the master password if it were compromised.)