The main weakness
is it’s a pain in the ass.
- Won’t generate strong passwords.
- Won’t fill out login forms for me.
- Manual, slower search and copying (worse for dyslexia).
- Increases risk of submitting credentials to wrong site/app (especially malicious ones).
- Increases error of mistyping credentials.
- More effort to back up & retrieve.
Makes it harder: when I go to the wrong website, the manager simply doesn’t suggest credentials (it does not have) for it. That causes me to wonder why.
Without a password manager, a user is never prompted to wonder. They’d simply not notice.