> Except this all but negates the benefits of a password manager. It preserves the main benefit: that I no longer need to remember a separate password for each

> Except this all but negates the benefits of a password manager. It preserves the main benefit: that I no longer need to remember a separate password for each domain in order to stop sharing passwords across them. > Now if someone steals your master password, they can generate every single password you use. So it's just a matter of keeping the seed in the user's head and nowhere else. Right? That doesn't seem to be any more serious a security challenge than keeping secure an encrypted datastore full of passwords.