Browser restrictions and scripting vulnerabilities mean that fake LastPass login windows are the perfect vehicles for phishing attacks.

Two researchers showed how the LastPass password manager would give up its valuable secrets with only a little coaxing.

The KeeFarce tool uses common hacking techniques to bypass the master password and extract password data from the KeePass password manager.

Five popular password managers, four of which have been patched, had a number of security vulnerabilities, according to new research.