I described a new attack technique that I used against 11 password managers. The result was that stored data of tens of millions of users could be at risk.