Quit letting my password manager autofill after a near miss at login
Used to click autofill without looking, but last month a shady clone site almost got my bank login before I caught the URL. Now I manually type the password every time on new devices, takes 10 extra seconds but worth it. Has anyone else gotten burned by autofill or am I just paranoid?
Read a piece a while back about how these phishing kits are basically built to slip past password managers now. The whole point is they can swap the URL fast enough that the manager doesn't catch it before it fills. Manual typing sucks but at least your brain checks the address bar, you know? Plus it forces you to slow down and actually look at what you're logging into. I do the same thing now on anything that isn't a saved site.