Ranking updated
How to start using a password manager
Remembering a different strong password for every account is impossible, so many people reuse a few, which means one leak opens many doors. A password manager remembers them for you. Setting it up takes an evening; after that, logging in gets easier, not harder.
A step-by-step setup, then password manager apps. Your master password and recovery options protect everything; store recovery codes somewhere safe and offline.
Pick a manager and a master password
Choose a reputable password manager that works on all your devices. Create a long, unique master passphrase you can remember, and never use it anywhere else.
Protect the vault
Turn on two-factor authentication for the manager; see how to set up two-factor authentication. Save recovery codes or an emergency kit in a safe, offline place.
Move in gradually
Import saved passwords from your browser, then let the manager capture new logins as you use sites. You do not need to do everything in one night.
Fix the riskiest first
Use the manager’s security check to find weak or reused passwords, and replace them, starting with email, banking and shopping accounts. Compare apps in password manager apps.
| Step | What you do | Why |
|---|---|---|
| 1. Choose one | reputable, works on your devices | trust and convenience |
| 2. Master password | long, unique, memorable passphrase | the key to everything |
| 3. Two-factor | turn it on for the manager | extra protection |
| 4. Add logins | import, then fix as you go | no big-bang effort |
| 5. Replace weak ones | start with email and banking | biggest risks first |
Frequently asked questions
Is a password manager safe?
Reputable managers encrypt your vault, and using one with a strong master password and two-factor authentication is generally much safer than reusing passwords.
What if I forget my master password?
Many managers cannot recover it for you, so set up recovery options or an emergency kit when you start.
Which passwords should I change first?
Email, banking and any account where you reused a password, because they give access to others.