If you reuse passwords, use weak ones, or keep them in a notes file, you already know the problem - you just haven't met the fix. A password manager makes a unique, strong password for every account effortless, by remembering them all for you in an encrypted vault. This guide explains what a password manager is, how it works, why it's the single best upgrade to your security, and whether it's actually safe.
A manager also settles the old debate of how often to change your password.
Already know you want one? Our 4-question password manager quiz (who it is for, budget, privacy, where your passwords are today) gives you a single recommendation with its real price, including the free option when it is enough.
Want to try one without paying? Proton Pass stores unlimited passwords on unlimited devices with end-to-end encryption on its free plan, and its Pass Monitor flags the weak and reused ones you already have.
Black Friday 2026 (read on 28 October 2026): the Proton Pass partner page our link opens takes 60% off the first year of Pass Plus ($23.88 for the first 12 months, then $35.88 a year) and Pass Family ($33.48 for 6 accounts, then $59.88 a year), with the 30-day money-back guarantee. The order page shows the price for your country, so check it before paying. See the Proton Pass Black Friday offer
What a password manager is
A password manager is an app that generates, stores and autofills a unique, strong password for every account - all kept in an encrypted vault you unlock with one master password. You remember a single passphrase; it handles creating random passwords, filling them in on the right sites, and syncing across your devices.
It's the most effective everyday security upgrade there is, because it makes the one thing that actually matters - unique passwords everywhere - effortless.
How it works
Your credentials live in a vault encrypted with a key derived from your master password:
- Generate - on sign-up, it creates a strong random password and saves it.
- Autofill - a browser extension or app recognises the site and fills the saved login.
- Sync - your vault syncs across devices in encrypted form.
The best managers are zero-knowledge: the vault is encrypted and decrypted on your device, so the provider only ever stores ciphertext it cannot read. Only your master password - never sent to the provider - can unlock it.
Why you need one
Password reuse is the biggest everyday security risk, and no human can remember a unique strong password per account. When one site is breached, attackers replay the leaked pair on dozens of others - credential stuffing - and reuse turns one leak into many hijacked accounts.
A password manager gives every account its own random password, so a breach stays contained. It also resists phishing - it won't autofill on a fake look-alike domain, a built-in warning - and flags weak or breached passwords.
★ Cure53 audit · ✓ Free plan · Cross-platform
A unique password for every account → NordPassZero-knowledge vault · Generates & autofills strong passwords · Built-in breach scanner · Cross-device sync→Is it safe?
A reputable zero-knowledge manager is far safer than the alternatives. The vault is strongly encrypted and only you hold the key via your master password, which the provider never sees - so even a provider breach exposes only unreadable ciphertext. (For the deeper analysis, see are password managers safe?.)
The real risks are a weak master password and not enabling 2FA on the manager. Use a strong, unique master passphrase and turn on two-factor, and a password manager is a major net security gain.
The types
- Cloud-based (NordPass, 1Password, Bitwarden) - encrypted vault syncs via the provider; convenient, most popular.
- Local/offline (KeePass) - vault stays on your devices; full control, manual syncing.
- Browser built-in (Chrome, Safari) - free and convenient, generally less featured and browser-tied.
For most people, a reputable zero-knowledge cloud manager is the best balance.
How to choose one and get started in 10 minutes
Four checks separate a good password manager from a risky one: zero-knowledge encryption with a published independent audit, a free or cheap plan that covers all your devices, passkey support (the passwordless logins Google, Apple and Microsoft now push), and a one-click import from your browser. Here is how the main options compare on exactly that (plans checked on the official sites in October 2026):
| Manager | Free plan | Devices on the free plan | Passkeys | Paid plan from | Start |
|---|---|---|---|---|---|
| Proton Pass | ✅ Unlimited logins | ✅ Unlimited | ✅ Free | €2.99/month billed yearly | Try free → |
| NordPass | ✅ | ⚠️ 1 active device at a time | ✅ Free | €1.39/month (2-year plan) | See offer → |
| Bitwarden | ✅ Unlimited logins | ✅ Unlimited | ✅ Free | $19.80/year | bitwarden.com |
| Browser (Chrome, Safari) | ✅ Built in | ⚠️ Tied to one browser or ecosystem | ✅ | - | Already installed |
Our pick for a first password manager: Proton Pass Free. Like Bitwarden, it gives you unlimited devices, passkeys and open-source, independently audited apps at no cost, so your phone and computer sync from day one; it also includes 10 email aliases on the free plan to keep your real address out of new sign-ups, in a simpler interface for a first manager. The paid Plus plan mainly adds the built-in 2FA code generator. If you prefer one app that works the same everywhere and plan to pay anyway, NordPass Premium is the cheapest paid plan here. For a wider comparison of the free plans, see our best free password managers.
Getting started takes three steps:
- Install the app on your phone and the extension in your browser, then create a long master passphrase you have never used anywhere else.
- Import the passwords your browser already saved (export them as CSV from Chrome, Edge or Firefox, import the file, then delete the CSV and the browser copies).
- Fix the worst first: change the passwords of your email and bank accounts to generated ones, then turn on 2FA on the manager itself. Add passkeys where your accounts offer them.
The bottom line
A password manager generates, stores and autofills a unique strong password for every account in an encrypted vault unlocked by one master password - turning good password hygiene from impossible into automatic. It contains breaches, resists phishing, and (zero-knowledge, with a strong master password and 2FA) is far safer than reusing passwords. If you do one thing for your security this year, make it this.
Editorial guide based on how password managers work (encrypted vault, zero-knowledge, autofill) and standard security practice. Commercial links carry the rel="sponsored nofollow" attribute; an affiliate commission may apply at no extra cost to you.
★ Cure53 audit · ✓ Free plan · Cross-platform
Lock down your accounts → NordPassStrong unique passwords · Data Breach Scanner on Premium · 30-day money-back→Frequently asked questions
What is a password manager?
A password manager is an app that generates, stores and autofills a unique, strong password for every account you have, keeping them all in an encrypted vault that you unlock with a single master password. Instead of remembering dozens of passwords (and reusing weak ones), you remember just one, and the manager handles the rest - creating random passwords, filling them in on the right sites, and syncing across your devices. It's the single most effective upgrade to your everyday account security, because it makes unique passwords effortless.
How does a password manager work?
It stores your credentials in a vault encrypted with a key derived from your master password. When you visit a site, a browser extension or app recognises it and offers to autofill the saved login; when you sign up somewhere, it generates a strong random password and saves it. Good managers are zero-knowledge: the vault is encrypted and decrypted on your device, so the provider only ever stores ciphertext it cannot read. Your data syncs across devices in that encrypted form, and only your master password (never sent to the provider) can unlock it.
Why do I need a password manager?
Because password reuse is the biggest everyday security risk, and humans can't remember a unique strong password for every account. When one site is breached, attackers try the leaked email/password pair on dozens of other sites - credential stuffing - and reuse means one leak cascades into many hijacked accounts. A password manager gives every account its own random password, so a breach stays contained. It also resists phishing (it won't autofill on a fake look-alike domain) and flags weak or breached passwords. It turns good password hygiene from impossible into automatic.
Is a password manager safe?
A reputable, zero-knowledge password manager is far safer than the alternatives (reused passwords, a notes file, or your browser's basic storage). The vault is strongly encrypted and only you hold the key via your master password, which the provider never sees - so even a breach of the provider exposes only unreadable ciphertext. The real risks are a weak master password and not enabling two-factor authentication on the manager itself. Use a strong, unique master passphrase and turn on 2FA, and a password manager is a major security gain, not a single point of failure.
What are the types of password manager?
Three broad kinds. Cloud-based managers (NordPass, 1Password, Bitwarden) sync your encrypted vault across devices via the provider's servers - convenient and the most popular. Local/offline managers (like KeePass) keep the vault only on your devices, giving you full control at the cost of manual syncing. Browser built-in managers (Chrome, Safari) are free and convenient but generally less featured and tied to that browser. For most people a reputable zero-knowledge cloud manager is the best balance of security and convenience.
