Some password managers work by storing your password database online. In theory, only you could access the database and unlock your passwords.

This has risks of its own. In 2022, the password manager firm Lastpass had its users’ password databases stolen by hackers.

In the months that followed, some of Lastpass’ users had their databases broken into, revealing their passwords.

Lastpass didn’t store its users’ primary passwords. If it had, the criminals would have been able to unlock the databases instantly.

However, with the password databases, the hackers could guess some users’ weak primary passwords, and steal their online identities.