Pairing URLs and login credentials doesn´t automatically mitigate the threat from phishing; however, when a user is tricked into visiting a phishing website, the URL of the phishing website will not match that stored in the password manager and the credentials will not be auto-filled. This should alert the user that the website is not the one it is claiming to be.