This question already has an answer here:
I want to create a generative password manager. Generative password managers generate passwords based on seeds such as the master password and the website's URL. In contrast, most password managers store the password in an encrypted file (encrypted with the master password). In this regard, since generative password managers do not store any information, would it be more secure than a normal password manager which delivers an encrypted password file to the user to be decrypted on the client-side? An attacker can theoretically look into the generative password manager's memory and retrieve the generated password. Would this be more difficult than trying to breach a server, steal the password file, and then trying to brute-force it?