This should have been checked before starting to implement and advertise your &quot;secure&quot; password manager. Just saying.<p>Edit: What, expecting people to do research before they make a software that users are supposed to entrust sensitive data to is so unreasonable it deserves silent downvotes?