What’s the most secure way to input the master password?
If you make the password sufficiently complex (entropy), it’s difficult/burdensome to manually input multiple times a day. Also, keyloggers can detect it. If you copy/paste it, you’re vulnerable to clipboard attacks.
Is there an accepted best practice? Obviously, this is a critical password so I want to input it in a way that is as ironclad as possible.
I do have AV that I trust (and I know that it’s supposed to stop such attacks) but I want to take it to the next level and still ensure that I’m doing it in the safest way in case it fails.
On that note, does entering it in the extension and/or at the site itself store the password in a cookie or otherwise susceptible to session hijacking?
Hoping someone has devised a method that is as safe as possible.
Thanks in advance for any insight!