Most people reuse a handful of passwords across dozens of accounts. It's understandable — nobody can remember 80 unique, complex passwords. But reuse is exactly what criminals exploit: when one website is breached, attackers try the same email and password everywhere else. A password manager solves this problem. This guide explains how password managers work, whether they're safe, which to choose and how to set one up in an afternoon.

What Is a Password Manager?

A password manager is an app that securely stores all your passwords in an encrypted vault. You remember one strong master password (or use your fingerprint or face), and the password manager:

  • creates long, random, unique passwords for every account,
  • fills them in automatically on the correct websites and apps,
  • syncs them across your phone, computer and browser,
  • warns you about weak, reused or leaked passwords.

Why Password Reuse Is Dangerous

Data breaches happen constantly. When a site is breached, stolen email and password lists are shared among criminals, who run automated "credential stuffing" attacks against banks, email providers and social media. If you reused the password, those accounts fall too.

With a password manager, every account has a different password, so a breach at one site stays contained.

How Secure Is a Password Manager?

Reputable password managers use strong encryption, and most use a zero-knowledge design: your vault is encrypted on your device with your master password, so the company itself cannot read your passwords.

Password managers are not risk-free, but they are far safer than reusing passwords or writing them in a notebook on your desk. To stay secure:

  • Choose a long, unique master password — a passphrase of four or more random words works well.
  • Turn on two-factor authentication for the password manager itself — see our 2FA setup guide.
  • Keep your devices updated and locked.

Types of Password Managers

Built-in password managers

  • Apple Passwords / iCloud Keychain: excellent for iPhone, iPad and Mac users.
  • Google Password Manager: built into Android and Chrome.
  • Microsoft Edge password manager: built into Edge on Windows.

These are free, easy and good for many people, especially if you stay within one ecosystem.

Dedicated password managers

  • Bitwarden: open-source, with a generous free plan that works on all devices.
  • 1Password: polished design, strong family and business features (paid).
  • Proton Pass, Dashlane, Keeper and others: each with different strengths.

Dedicated managers work across all platforms and browsers and often include secure notes, password sharing and breach monitoring.

How to Choose a Password Manager

Ask yourself:

  1. Which devices do I use? Mixed Android/Windows/iPhone households benefit from a cross-platform manager.
  2. Do I need to share passwords with family or a team?
  3. Is a free plan enough, or do I want premium features like advanced monitoring and family sharing?
  4. Does it support passkeys — the password replacement that's becoming common?

How to Set Up a Password Manager, Step by Step

  1. Install the app on your phone and the browser extension on your computer.
  2. Create a strong master password you've never used before. Write it down and store it somewhere physically safe until it's memorised.
  3. Turn on two-factor authentication and save the recovery codes.
  4. Import saved passwords from your browser — most password managers do this automatically.
  5. Delete the passwords stored in your old browser to avoid confusion (after confirming the import).
  6. Start with your most important accounts: email, banking, mobile money, social media and cloud storage. Change their passwords to strong, generated ones.
  7. Update the rest gradually as you log in to each site.

Tips for Everyday Use

  • Let the manager generate passwords — 16 characters or more.
  • Use the security dashboard to fix weak or reused passwords over time.
  • Store other secrets: Wi-Fi passwords, software licence keys and recovery codes.
  • Be cautious with autofill — if your password manager doesn't offer to fill a login page, check the address carefully. It could be a fake site from a phishing scam.

Password Managers for Families and Businesses

Family plans let everyone have their own vault plus shared folders for Netflix, Wi-Fi or utility logins. Business plans add admin controls, so you can give staff access to company accounts and remove it instantly when they leave. Our business guides cover more ways to protect a small company.

Frequently Asked Questions

What if I forget my master password?

Because of zero-knowledge encryption, many providers cannot reset it. Set up the recovery options offered (such as emergency access or a recovery kit) and store them safely.

Is it safe to store passwords in my browser?

Modern browsers' password managers are reasonably secure, especially with device encryption and a screen lock. Dedicated managers offer more features and cross-browser support.

Can a password manager be hacked?

Providers are high-value targets, but zero-knowledge encryption means stolen vault data is useless without your master password. A strong master password and 2FA are essential.

What are passkeys?

Passkeys let you sign in with your fingerprint, face or device PIN instead of a password. They can't be phished and are supported by major password managers.

Final Thoughts

A password manager is one of the simplest and most effective security upgrades you can make. It removes the need to remember passwords, eliminates reuse and protects you from breaches. Set one up this week, starting with your email and banking. Explore more security guides in our Tech section.