password managers... uhm, are they any good? and are there any that work on the web? or is this too much risk at all?