Agreed. For example: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=lastpass https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=lastpass or https://cve.mitre.or

Agreed. For example: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=lastpass https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=lastpass or https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=1password https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=1password. I do let chrome remember my passwords (and sync them), as that has high utility (and I'm already significantly trusting that google have their shit together when it comes to security.) But that said I have two categories of passwords; sites that are relatively trivial (e.g. spotify, hackernews), and sites that are tied to my identity or finances (e.g. email, banking). There really aren't that many in the latter category, and it's manageable (with a bit of practice) to use a memory palace type technique to associate sites with a strong visual that turns into a phrase. For the former category, I have a fairly junky heuristic that gives each site a unique non-dictionary based password that's usually 15+ characters. If my chrome profile ever disappears (or isn't obtainable), I could recreate passwords that way.