For cloud-based password managers, is it safe to login when using public WiFi?
To help get good answers to this question, let's define 3 terms:
- Cloud-based password managers = Password managers such as LastPass, Bitwarden, Enpass, and Dashlane, when all usernames/passwords/data are stored in the cloud.
- Login = Access a web-based password vault/safe or access password data via a web browser extension/plug-in on your own hardware. Assume access is via HTTPS, but always assume no HSTS data is already stored on the local client.
- Public WiFi = Open internet access available to anyone without a password. Always have to assume it is being operated by someone with malicious intent or that it has already been compromised.
I'm not sure whether or not we can assume that DNS is controlled by the client because I'm not familiar enough with every operating system to know what DNS it uses for new open WiFi connections. If you can include this issue in your answer, all the better.