I don't trust anyone other than Google with my passwords. Google password manager is only available on Chrome. So unfortunately I'm locked into Chrome. I do like Edge and Firefox but the passwords are an issue.
Google password manager is not end to end encrypted.
LastPass, Bitwarden, and Firefox too, are end to end encrypted with the user chosen password at least. If your password is strong enough, it should be safe.
Apple also uses end to end encryption, although there you might also be vulnerable via a hack of your iCloud account, not sure.
1Password is the most secure option: here, in addition to your password being encrypted with your master password, it's also encrypted via a secret key that is pre-generated. So a leaked encrypted 1Password backup won't be brute-forceable.
What happen if google itself is the adversary in the safety of your passwords? That spur of the moment trollish YouTube comment might get flagged, bringing down your google account and all services tied with it; gmail, gdrive, your saved passwords etc. Then trying to rectify the situation is close to impossible since theres no human support for (free) google account.
Is the Apple password manager available on non-Apple devices?
It could be argued that Google has significantly more resources to invest in security of the password storage than these smaller companies. We've recently seen LastPass implode, but I've never heard of any successful attack on Google password manager.
I don’t really get how people keep falling for online password managers. The only thing I can think is there must be some psychological effect: “well, this person is suggesting something that I know to be very dumb. So, I guess they must know something I don’t, better trust them!”
> I don't trust anyone other than Google with my passwords.
At this stage in their corporate life-cycle, where greed and complete and utter lack of care towards user happiness reigns supreme, trusting google with anything is a rather large mistake IMO.
Of course this is only my opinion, but I'd rather trust an open-source password manager such as KeePassXC. They all have browser integration (native or plug-in) if this is important.
