The npub should only serve as something to identify you. To actually login you should sign a message with your private key. Some kind of extension perhaps.
Password managers also have a single point of failure which is the password to get in the manager.