>The thing is, everywhere you use your password is probably 'closed source' and probably has 'lots of bugs'. Well, that's the argument for a password manager,

>The thing is, everywhere you use your password is probably 'closed source' and probably has 'lots of bugs'. Well, that's the argument for a password manager, no? You can't trust any of these services, so you generate transient, strong, one time passwords for each of these, and then use a password manager you trust to manage it all instead. If one gets leaked, then sure it's a pain, but at least it doesn't mean they can log into every other service too!