I’m just scared that they’re saved with reversible encryption on the disk, then malware could steal them

  • Your saved passwords are reversible too, just don’t do it. If you really want to, put a password on it, but then why would you even save it at all? The convenience is lost at that point. And if you save it without a password, to decrypt the cc a decryption key has to be saved somewhere, and if it’s not on your pc, it’s saved on a server you don’t own.