You probably can't trust your password manager if it's compromised

Researchers from ETH Zurich and USI found multiple weaknesses in the zero-knowledge designs of Bitwarden, LastPass, and Dashlane that allow a malicious server to disclose or downgrade vault encryption and in some cases retrieve or modify user passwords; vendors have acknowledged the findings and begun mitigations.