That's why I don't use a cloud password manager. I use one that allows syncing my devices directly with my phone via wifi. Doesn't even touch a file hosting ser

That's why I don't use a cloud password manager. I use one that allows syncing my devices directly with my phone via wifi. Doesn't even touch a file hosting service like Dropbox. Yes, that makes the physical devices a vulnerability, but the attacker would still need to guess or brute-force the master password to decrypt the vault. It's also a much less juicy target than a million customers of a cloud service. And as someone else pointed out, using the same password everywhere is a non-starter. Nor is memorizing the passwords for more than a tiny fraction of the roughly 1000 entries in my password manager.