Granted, the UI should allow paste and the password policy should allow complex passwords.
But, since when are password managers best practice? I wouldn't want to put all my eggs in one basket...
It took me more than fifteen but less than twenty years to develop the ability to commit dozens of complex passwords to memory and change them frequently enough. I highly recommend that you develop this ability, too. Practice, practice.
You just can't expect the average user to go to such lengths. Password managers may not be perfect, but they are still an improvement over existing methods. This is incredibly useful when you're testing out a lot of online applications or apps that you may not ever use again - there's no way to have unique passwords for all of them without a password manager.
Sure, we can all remember the top 5 used passwords. Some of use can remember 10. Other 30. But there's not a chance in hell I remember every single password.
My pass store currently has over 300 passwords. Some of which I've not used in ~1year. Good luck remembering that.
Most replies here don't address the core question. The one that does suggests that password managers are second-best, not best practice.
I'll accept these downvotes as a badge of honor!
Do password managers have a history of being cracked (via keylogger if nothing else)? Of course this used to happen to browsers (which didn't used to even have a "master password").
I've personally fallen victim to malware that would automatically extract your password from the "remember password" feature of AOL Instant Messenger. Now, I never use that feature in any application. (I also never deliberately run malware anymore, except in a clean-install.)
But, since when are password managers best practice? I wouldn't want to put all my eggs in one basket...
It took me more than fifteen but less than twenty years to develop the ability to commit dozens of complex passwords to memory and change them frequently enough. I highly recommend that you develop this ability, too. Practice, practice.