Ask HN: Why should I trust password managers?
I don’t trust or use SAAS password managers.  They are massive honeypots just waiting to be pwned and everyones’ passwords to all their websites stolen.  They have above average security, but unlike a typical website they can’t just store a one-way hash of passwords that remains secure even when stolen, they have to store the actual password.<p>I imagine nation state-supported malicious hackers are targeting them.  Everything else is getting breached and leaked these days, there’s a non-trivial possibility these will too.<p>I just use KeePassXC instead, and periodically ‘sync’ the database across my workstations and laptop.  And by ‘sync’, I mean manually export the database and rsync it around to my workstations and laptop and re-import it on each.  But given how infrequently I create new web accounts, this isn’t a major hassle.  It works fine, I don’t need some centralized service for this.