@glyph @whitequark @mcc Any proper password manager also matches the domain of the site and is not vulnerable to phishing.