A Password manager that only has a local "vault" and simply syncs an encrypted file a much safer security wise way to operate. The BIG question is whether the r

A Password manager that only has a local "vault" and simply syncs an encrypted file a much safer security wise way to operate. The BIG question is whether the remote server does any processing of the websites (for spam, malware etc) in which case it decrypts the website name. That becomes a big temptation to log and on sell. Not the logon password just the address. Having an emergency access code or method is just another security hole.