password manager compromised action