How to Use a Password Manager (Beginner's Guide)

A password manager is an app that stores your passwords in an encrypted vault, fills them in on websites and apps, and generates new ones. You only remember one strong master password; the manager remembers the rest.

Why it is worth it

• Unique passwords everywhere become effortless, which defeats credential stuffing.
• Phishing protection: most managers only autofill on the exact website the password belongs to, so a look-alike fake site gets nothing.
• Sync across devices so your passwords are available on your phone and computer.
• Breach alerts in many managers warn you when a saved site has been compromised.

Choosing a manager

Options include the managers built into browsers and operating systems, and dedicated apps. Look for:

1. End-to-end encryption, so the provider cannot read your vault.
2. Two-factor authentication for the vault itself.
3. Support for all your devices.
4. A good security track record and regular independent audits.
5. An export option so you are never locked in.

Setting up, step by step

1. Create a long, memorable master passphrase. Six or more random words is a good choice.
2. Turn on two-factor authentication for the manager.
3. Store your recovery codes somewhere safe and offline.
4. Import passwords saved in your browser, if the manager offers it.
5. Start with your most important accounts: email first, then banking, then social media.
6. For each, use the manager or our password generator to create a new random password and save it.

Migrate gradually

You do not need to change 200 passwords in one evening. Update each account the next time you log in. Within a few weeks, most of your important accounts will be protected by strong unique passwords.

Frequently asked questions

Should I use a password manager?

Yes. Should I use a password manager? For almost everyone the answer is yes: it makes a unique password for every account practical, which defeats credential stuffing. It also gives you password autofill only on the real website.

Are password managers safe?

Reputable password managers encrypt your password vault so the provider cannot read it, and they have strong security track records. Are password managers safe compared with reuse or notes? Far safer. Protect the manager with a strong password manager master password and 2FA.

Are browser saved passwords safe?

Are browser saved passwords safe enough? Modern browser password managers encrypt saved passwords and sync them securely, and they are far better than reuse. Dedicated managers add sharing, security reports and cross-browser support.

What is the best way to store passwords?

The best way to store passwords is an encrypted password vault inside a reputable password manager. Avoid notes apps, spreadsheets and emails for password storage.

Is there a family password manager or business password manager?

Yes. Most major providers offer a family password manager plan with shared folders, and a business password manager with admin controls, shared vaults and offboarding tools.