Would it be clever to use a password manager with randomized passwords and also store them in chrome's password vault?

I mean it's less secure, yes, but should something bad really happen I can just change the password and this would be a good upgrade in terms of user experience

What do you guys think?

Any “Password manager” is an ADITIONAL threat to your security.
And you have 0 guaranties they don’t sell your infos. For all passwords.
I don’t know ANY company I would trust with all my passwords.

@NoToJavaScript

Who said anything about a company?

@bahua Your password manager is developed by someone, right ?
Or you coded one your self for you ?

@bahua And you mention "chrome's password vault". Soo, pretty sure google already have every single password you use.

And probably somewhere in a text file on thier internal network

@NoToJavaScript there are open source password managers that only store your database locally. Keepass2, for example. It has been audited too, multiple times

@NoToJavaScript

I didn't mention chrome. The OP did. The OP didn't mention a company. When I think of a password manager, I first think of the FOSS project that maintains my password manager, keepass. They develop it, but they certainly do not host my database.

I'm using Bitwarden which is indeed open source

@NoToJavaScript So I am supposed to memorize the 1000 passwords of every site I ever signed up for and maybe change them once in a while as well? That's what muggles try and then they use the same shitty password everywhere. Yeah, much more secure than an encrypted offline database used by an audited open source password manager.

Keepassxc has a browser integration that makes for decent UX.

But don't use Chrome.
If you must, use Chromium.

Personally I never use any online service for passwords, so I use Keepass.

Also, don't browsers have issues where extensions and plugins can access stored passwords?

I use LessPass.

I store my passworda in text files obfuscated by other information, garbage and stored all over the place in files with completely unrelated names, sometimes other possible ones. So really only I'm able to know that even is a password for anything. Id say that's more secure that putting all the passwords in one place tbh

@Hazarth This seems very messy. How do you deal with in on multiple devices, especially mobile?

If you're worried that your database gets stolen you should worry just as much about your keystrokes or your screen getting recorded.

@saucyatom oh, I don't have anything important installed on my mobile device. So most things here use a password I remember but don't care much about. Easentially I only really need to manage my main email password here, and that's not much of a problem. I do remember some of my more important passwords without putting them anywhere (or just temporarily before I get used to them)

@Hazarth security through obscurity is never a good idea, no matter what your threat model is

@endor perhaps, tho its mostly for non-essential accounts really. Idk, works for me so far