Password Managers Share a Hidden Weakness