Unpopular opinion: password managers only help if you actually lock the browser one too
Last month my cousin clicked a fake shipping email on her laptop at her place in Akron and it grabbed every saved login in Chrome. I spent two hours with her resetting 14 accounts and turning on two factor everywhere. The part that got me was how fast it happened, under a minute from click to her bank password being pulled. Anyone else had to clean up after a saved logins mess, and did moving to a locked vault actually stop it from happening again?