Vulnerabilities found in web-based password managers
 

i think the keyword here is "web-based" - i, too, use a password manager, but i would have to be 500% sure before i upload the password database to the internet - even if it's manually on my own server -

so how much more insecure are so-called free (or even paid) third-party online services? it's common sense, really, to avoid those.

I don't use any of those mentioned in the article, I use keepassX which stores the passwords in an encrypted file locally on the machine.

I'd rather use a piece of paer in my wallet and one in a safe place. If I lose my wallet I get it out of the safe place and change my passwords.

I think this falls into the "this surprises you how?" category.

I also use KeePassX and am quite happy with it.