Security researchers have published a paper demonstrating several ways password managers can be hacked. Is it time to make a change?