A password manager database is the file or store in which password-management software keeps saved credentials and related sensitive data. It is typically protected by encryption and unlocked using a master password, device authentication, or another key-management method. Depending on the product, it may be stored locally, synchronized through a cloud service, or both.
Attackers may target these databases to obtain many credentials at once, but encrypted storage is not automatically safe if the device is compromised or the database is unlocked. Malware can sometimes steal database files, capture unlock secrets, or access credentials while the manager is open. Defenders should keep password-manager software and devices updated, use a strong unique master password and multifactor authentication where available, and investigate unexpected access to credential stores. If a database may have been exposed, change affected passwords and revoke active sessions.