step 1) use a password mamager step 2) forget your own password step 3) witness the password mamager NOT autofill on phishing sites