If someone uses a password manager and tries to organize the credentials well, doesn't that make attacks easier?
Let's assume an attacker has the encrypted credentials available for offline attacks, and the attacker knows which software was used to save the data, and that he also knows what the credentials are used for (websites like Google, Facebook, Amazon, et. al.).
Does this knowledge make the attack easier? Can it be prevented, or at least made significantly harder? If so, how do password suites try to prevent this?
A simplified example: I have an Amazon account, and I store my credentials in a password manager. They are well organized and named, i.e.
"Amazon", which is on the top of the list because it's sorted alphabetically. An attacker now steals my encrypted credential store, and begins a brute-force attack.
If the first few bytes (e.g. header + 30) don't turn out to include the string
"Amazon" appended with whatever the password suite uses as a delimiter, the attacker could stop trying to decrypt my password with his current guess. This potentially reduces the time needed to crack the password, if only linearly.
I don't know much about encryption. Any advise regarding my choice of words is appreciated. Even spelling and grammar.