Remember when I said don’t install browser extensions, as they have unimaginable access to your private data and secrets?  Well, password managers definitely fall into that category as well! 

In general, never install a browser extension, seriously – it is one of the most insecure things you can do, unless you absolutely trust the vendor with your system, data, and web access!  Trustworthy security vendors are quick to acknowledge and patch such vulnerabilities.   Generally speaking, though, you shouldn’t install browser extensions!

The core of the problem is that browser extensions can spy on your online activity, scrape inputs to websites, capture what you cut/paste, and even change what you see when you go to a website.  These are the exact superpowers that cybercriminals want!  Don’t be a willing victim. 

Now, go remove all those browser extensions you have installed! 

For more information on which Password Managers were hacked, check out the Bleeping Computer article: https://www.bleepingcomputer.com/news/security/major-password-managers-can-leak-logins-in-clickjacking-attacks/