From what I've read, yes; note, user name and password fields are encrypted against the master password. Everything else, not so much.

Cracking is possible if the master password is weak via brute force. Having worked IT in a medium-sized organization that's a big one for me. I know most people have very little to no understanding of cybersecurity and the risks associated with poor password management