Good password managers (KeePass) run locally and have no remote server to connect to. Mediocre password managers still store passwords encrypted. If you get in

Good password managers (KeePass) run locally and have no remote server to connect to. Mediocre password managers still store passwords encrypted. If you get infected by malware then it could just grab the password as you type it anyway; if anything then using a password manager is slightly more secure, since browser integration goes over an authenticated connection that is harder for non-root applications to intercept. If you were good at securing physical objects then you could just lock down the computer instead, and stop bothering with passwords.