Not that it's a cure-all, but one probably shouldn't be using a centralized password store without some sort of multifactor authentication enabled.