For me it's lastpass.com. They do it right: they remove the passwords they (easily) find on my HD. The problem is still the master password, I agree.