Google is obviously one of the biggest technology companies in the world, and is capable of hiring teams of highly skilled professionals who get paid a lot of money to keep their servers from being breached.
On the other hand, Google's business models revolves around collecting and sharing people's private information.
Therefore, we need to understand the difference between security, and privacy. Google provides security, but it does not provide privacy.
And even then, your data is not guaranteed to be perfectly safe. That article does not mention one of my favorite cases, where people got pictures from strangers in their Google Photos account.
To be fair, mistakes do happen even to the best of us. Nothing is perfectly secure, ever. The difference is, as I alluded to in an earlier post, that when this happens to a juicy target like Google, the damage is amplified.
However, talking about reputation, we can also find non-honest examples. Like when Google "mistakenly" hid microphones in Nest. Oops.
With all that said, the password manager that I use is KeePassXC:
I use and recommend KeePassXC on the desktop, and KeePassDX on the phone. The main pro is also a con, depending on how you see it: it's entirely offline and you have to manage your own backups, synchronization between devices, etc.
As always, you need to look into the balance between convenience and security. I'm comfortable using KeePassXC, although there are others available mentioned in that thread.
I know I can trust its technology because it's open source and one can examine the mechanism used to encrypt the database file. Which I've done, and while I cannot claim to be a competent programmer, it looks safe to me.
