I do as well, but I have to admit that a browser-based solution has a real security advantage when it comes to phishing protection, since it has access to the U

I do as well, but I have to admit that a browser-based solution has a real security advantage when it comes to phishing protection, since it has access to the URL and can compare it to the one stored for the password. It would be cool if there was some open password management API that browsers/password managers could implement to solve this without extensions.