Password managers are secure, but only if you are using them right.