can password managers be hacked