Is a password manager an effective defense against vulnerabilities like Heartbleed, or just another way to lose data to hackers?