https://www.theguardian.com/technology/2022/aug/22/google-cs...
I’d love to hear more about that statement.
It could be argued that Google has significantly more resources to invest in security of the password storage than these smaller companies. We've recently seen LastPass implode, but I've never heard of any successful attack on Google password manager.
Still prefer to keep them offline though.
As of last month or so, it is now available on Windows as well.
Google password manager is not end to end encrypted.
LastPass, Bitwarden, and Firefox too, are end to end encrypted with the user chosen password at least. If your password is strong enough, it should be safe.
Apple also uses end to end encryption, although there you might also be vulnerable via a hack of your iCloud account, not sure.
1Password is the most secure option: here, in addition to your password being encrypted with your master password, it's also encrypted via a secret key that is pre-generated. So a leaked encrypted 1Password backup won't be brute-forceable.
At this stage in their corporate life-cycle, where greed and complete and utter lack of care towards user happiness reigns supreme, trusting google with anything is a rather large mistake IMO.