SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/sec-pm-right-website

How does a password manager help against a fake login page?

It only fills in the password on the correct website.

Start playing free

  1. It blocks every email
  2. It only autofills on the real site ✔
  3. It changes your password hourly

Why: A manager matches the saved login to the real web address. On a lookalike phishing site it stays blank, which is your clue that something is wrong.

Huh, didn't know that: NCSC advises switching on two-step verification on the password manager account itself.

The dad joke
My password manager gave up. Said, 'Good luck, champ.'
Like this card?
Play the game

References

Answer: It only autofills on the real site. A manager matches the saved login to the real web address. On a lookalike phishing site it stays blank, which is your clue that something is wrong.

  1. NCSC: Password managers www.ncsc.gov.uk/collection/top-tips-for-staying-secure-online/password-managers
    the password will only autofill on the correct website
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyThere's a QR code sticker on the parking meter. What's the smart move before you pay?Security & PrivacyA website shows a padlock and https. What does that tell you?Security & PrivacyA phishing email lands in your inbox. The FTC says to forward it to which group?

That's stuff everyone should know.