The best password manager is the one that works on all your devices, encrypts your data before it leaves them, and is easy enough that you open it every day. Features matter, but habit matters more. Here is how to compare your options and get set up in an afternoon.
What a password manager actually does
A password manager is an app that stores your logins in an encrypted vault. You unlock the vault with one strong master password, and the app fills in your usernames and passwords for you.
Because it remembers everything, you can use a long, random, unique password for every account. That removes the most common weakness in everyday security: reusing the same password on many sites, so that one leak exposes them all.
The features worth caring about
Most managers look similar on the surface. A handful of features separate the good from the merely adequate.
- Strong encryption: look for a service that encrypts the vault on your device, so the company itself cannot read your passwords.
- Cross-device sync: phone, laptop, and tablet should all stay up to date.
- Browser and app autofill: if filling in a login is clumsy, you will stop using it.
- Password generator: it should create long, random passwords with one tap.
- Secure sharing: handy for families who share a streaming or utility account.
- Emergency access: a way for a trusted person to reach your vault if something happens to you.
Built-in, standalone, or family plan?
Phones and browsers now ship with their own password saving. It is free and convenient, and for many people it is a big step up from reusing passwords. Standalone apps usually add better sharing, stronger organisation, and support across more browsers and operating systems.
| Option | Best for | Trade-off |
|---|---|---|
| Browser or phone built-in | People who stay in one ecosystem | Less flexible across platforms |
| Standalone app | Mixed devices, power users | Often needs a subscription for full features |
| Family plan | Households sharing accounts | One person usually administers it |
| Self-hosted or offline | Tinkerers who want control | You handle backups and updates yourself |
Making a master password you can remember
The master password is the one you must memorise, so make it long rather than clever. A passphrase of four or five unrelated words is easier to recall than a jumble of symbols and is very hard to guess. Never use it anywhere else.
Turn on two-factor authentication for the vault itself. That way, even someone who learns your master password still cannot get in without your second step.
How to switch without the headache
- Install the app on your phone and computer, and create the vault with your new master password.
- Import saved passwords from your browser, which most apps can do from an exported file. Delete that file afterwards.
- Start with your most important accounts: email, banking, and anything linked to money or identity. Replace weak or repeated passwords with generated ones.
- Update a few more accounts each time you log in, rather than trying to fix everything at once.
- Switch off password saving in your browser once you trust the new setup, so you are not splitting logins across two places.
Habits that keep the vault safe
A manager only protects you if you use it well. Lock the app automatically after a short idle time and keep your devices updated. Be careful with autofill on unfamiliar pages, because a fake login page will not match the saved web address, which is a useful warning sign. Our guide to spotting phishing emails covers the other half of that story.
It also helps to keep a note of your recovery options somewhere safe, such as a printed recovery sheet in a drawer. If you lose your master password, many services cannot reset it for you, precisely because they cannot read your data.
Key takeaways
- Pick a password manager that syncs across your devices and has smooth autofill.
- Use a long passphrase as your master password and protect the vault with a second step.
- Migrate gradually, starting with email and financial accounts.
- Keep a safe recovery plan, since lost master passwords are often unrecoverable.
For more explainers, browse the technology archive. You might also like our guide to backing up your phone and photos.
This article is general information, not security or legal advice. For your specific situation, consult a qualified professional.
Frequently asked questions
Is a password manager safe if the company is hacked?
Reputable managers encrypt your vault on your device, so a breach of their servers should expose only scrambled data. A strong master password is what keeps that data unreadable.
Is saving passwords in my browser good enough?
It is much better than reusing passwords. A dedicated app typically offers extra features such as secure sharing and wider device support.
What if I forget my master password?
Many services cannot recover it for you. Set up any recovery option offered and store a written copy somewhere secure.
Can I share passwords with family?
Yes. Most family plans let you share selected logins without sending them over text or email.
Photo: Old key and laptop by Nikowsk, CC BY-SA 4.0, via Wikimedia Commons
