Password managers arguably provide greater security since it allows users to easily create unique, difficult-to-guess passwords for every website they log in to.
But, if someone has a keylogger on their computer, isn't all this security defeated as soon as the user inputs their master password to get into the password manager?
Even if the user implements one-time passwords or two-factor authentication, the password manager still inserts the password of your saved websites in when you log into them (e.g. auto-type in KeePass).
From this, it seems that if you have a keylogger on your computer, you're totally screwed when it comes to passwords...
Or are you?