The short version: a password manager lets you use a different strong password for every account while you remember only one.
Our disclosure. SafeinAI has no affiliate links and earns nothing if you pick any of these. We list built-in options first and say which choices are free. If this ever changes we will say so here, on this page.
Most of us reuse passwords. That is normal.
You probably have dozens of accounts. Nobody can remember dozens of strong passwords, so many people reuse a few.
What a password manager is
A password manager is an app with a locked, encrypted vault. Encrypted means scrambled so that only the right key can read it. You remember one strong master password. The app creates, stores and fills in a different password for every site. (Some services call it the “primary password”.)
A password is a secret you type to sign in to an account. A passcode is the number that unlocks your phone.
Why reuse is the real risk
When one website leaks a password, criminals try it on other websites. This is called credential stuffing: testing stolen sign-in details on many other sites. If you reused the password, they get in. If every password is different, the damage stops at the first site.
Is it safe to keep everything in one place?
- Bitwarden, 1Password and Proton Pass each say on their own pages that vault data is end-to-end encrypted. Bitwarden and Proton Pass also use the word “zero-knowledge”. The company says it cannot read what is in your vault.
- Your master password and a second sign-in step (two-factor authentication, or 2FA) protect the vault.
- No tool is perfect. If someone got into your manager, they could reach all your passwords.
- Cyber security agencies in the US and the UK both advise using one. For most people, unique passwords in a manager are safer than reused ones.
How to choose
| Question | What to look for |
|---|---|
| Security record | Does the company publish independent security audits? How did it handle past problems? |
| Ease of use | Does it work on your phone, browser and computer? |
| Price | What is free? What do you lose on the free plan? |
| Family sharing | Can you share some passwords with family in a safe way? |
| Support | Are there clear help pages and recovery options? |
The best choice is the one that meets your needs and is easiest for you to use.
Free and built-in options come first
Your phone or browser may already have a free password manager. It is generally safe to use them on your own devices. In alphabetical order:
- Apple Passwords (iPhone, iPad and Mac, iOS 18, iPadOS 18, macOS Sequoia or later). It also works on a Windows PC with iCloud for Windows, in Chrome and Edge.
- Google Password Manager (Chrome and Android). It saves to your Google Account when you are signed in to Chrome.
- Microsoft Edge has its own password manager. Sign in to Edge with your Microsoft account and turn on sync to use your passwords on more than one device.
- Mozilla Firefox has a built-in password manager too.
Standalone managers are separate apps. Three examples, in alphabetical order, not a ranking:
- 1Password is paid. Its page shows a 14-day free trial and a Families plan for up to five people.
- Bitwarden says its basic password manager is “always free”. It also has paid plans.
- Proton Pass has a free plan with unlimited logins and unlimited devices. It also has paid plans.
We chose these three as examples because Bitwarden and Proton Pass have free plans, 1Password has a free trial, and each explains on its own pages how it protects your vault. Other good managers exist.
Prices change. Check the company’s page.
Built-in or standalone? Built-in is simplest if you stay in one phone or browser family. Standalone is better for mixed devices or extras such as family sharing.
How to make a strong master password
- Use a passphrase of random, unrelated words joined together. Some advice suggests three random words. US CISA suggests four to seven unrelated words and at least 16 characters. For this one password, use four or more words. Make your own.
- Never use it anywhere else.
- Length matters more than symbols. Adding length protects more than adding complexity. US government guidance (NIST SP 800-63B-4) tells services not to force a mix of symbols, capitals and numbers.
- Do not keep it in a note on your phone. You can write it on paper while you learn it, keep the paper very safe, and destroy it afterward.
How to set one up
- Pick one manager from above.
- Create the master password.
- Turn on 2FA for the vault if offered. Choose an authenticator app or a passkey, not text-message codes. See authenticator apps.
- Import your browser’s saved passwords if you like.
- Let it fill in your next sign-in. It fills a password only on the right website, which helps against fake sites.
- Change your email password before the others. Email can often reset the passwords on your other accounts. See secure your email.
Common worries
What if I forget my master password? Recovery differs by product. Bitwarden says it cannot retrieve or reset your master password. Read about recovery before you choose. See recovery codes and backups.
What about passwords saved in my browser? That is a password manager too. Lock your device. Never save passwords on a shared computer.
Can I share with family? In some products. Apple Passwords has shared groups. 1Password and Proton Pass have family plans.
What comes next
Use a passkey first when a site offers one. See passkeys. For a full clean-up, see the 30-minute account clean-up.
If an account was taken over: in the US, report at reportfraud.ftc.gov. In England, Wales or Northern Ireland, report to Report Fraud (formerly Action Fraud) at reportfraud.police.uk. In Scotland, call Police Scotland on 101.
Do this today (about 8 minutes)
- Open the password manager you already have (Apple Passwords, Google Password Manager or your browser’s).
- Create or confirm the master password or device lock.
- Change the password for your main email account to a new one that the manager creates.
Another day: choose a standalone manager.
Do not type any password into this website.
Checked: 25 Oct 2026. Settings screens change. If yours looks different, search the company's help page.
