Password managers are helpful in that they aid in creating and storing complex passwords. But most store those passwords in an encrypted vault. Most passwords are compromised if the master password is stolen. Luren Wang’s project, called Amnesia, isn’t perfect, but it eliminates the weakness of password vaults. Amnesia uses a secret, 256-bit value that is stored in a table on a user’s phone. The idea of a secret token sent from the phone could be used to augment one-time passcodes sent by SMS.”]
Source: https://www.cuinfosecurity.com/blogs/amnesia-project-tackles-password-security-p-2217