Can a password manager be hacked?