Copy pasting a comment that I saw on Reddit

——

Link to the original study (with a less sensationalized title):

https://zkae.io

A few important notes:

• the study is about Bitwarden, LastPass, Dashlane and 1Password. Proton Pass isn’t mentioned.

• the study presumes that they’re working with a malicious server (read this as compromised server, controlled by an attacker). The attacks they talk about in the article would not work on a normal server. Here’s their quote:

No need to panic: all of our attacks presume a malicious server. We have no reason to believe that the password manager vendors are currently malicious or compromised, and as long as things stay that way, your passwords are safe. That said, password managers are high-value targets, and breaches do happen.

• Here’s another quote, about other password managers:

You can ask your provider the following questions:

You can also ask your favourite password manager to commission an audit checking for our attacks in their products.

• If you still feel unsure/unsafe, then adopt an offline password manager (I highly recommend keepassXC).