Most replies here don't address the core question. The one that does suggests that password managers are second-best, not best practice. I'll accept these dow

Most replies here don't address the core question. The one that does suggests that password managers are second-best, not best practice. I'll accept these downvotes as a badge of honor! Do password managers have a history of being cracked (via keylogger if nothing else)? Of course this used to happen to browsers (which didn't used to even have a "master password"). I've personally fallen victim to malware that would automatically extract your password from the "remember password" feature of AOL Instant Messenger. Now, I never use that feature in any application. (I also never deliberately run malware anymore, except in a clean-install.)