Passwordstate 9.9 fixes authentication bypass flaw on August 28, 2025, adding clickjacking defenses for 29,000 customers.

A researcher has tested nearly a dozen password managers and found that they were all vulnerable to clickjacking attacks.

A Bitwarden feature that automatically fills in login info on recognized websites is vulnerable for exploit, but all password manager users should be careful.