[y7]

State for password managers is almost always stored encrypted, i.e. in a form useless to the attacker.