Password Manager Guide
A password manager remembers a unique, random password for every site — so you only memorize one strong master password. No brand rankings here (those are usually ads) — instead, learn how to evaluate any manager yourself.
Ethical Use Only: These tools are for defensive purposes — securing your own accounts and systems. Never use security knowledge against systems you do not own or lack written permission to test.
Why it matters
Password reuse is how one small breach becomes ten hacked accounts: attackers automatically try stolen email+password pairs on banks, email, and social media ("credential stuffing"). A manager makes unique passwords effortless — generate, save, autofill.
What actually matters when choosing
| Feature | What "good" looks like |
|---|---|
| Zero-knowledge encryption | The company cannot see your passwords — only you hold the key. Non-negotiable. |
| Open source + independent audits | Code anyone can inspect, plus published third-party security audits. Marketing claims alone aren't evidence. |
| Strong master-password policy | Encourages a long passphrase; supports 2FA/MFA to unlock the vault. |
| Works on all your devices | Phone + computer + browser, with reliable sync — otherwise you'll stop using it. |
| Import / export | You can leave any time with your data. Avoid lock-in. |
| Honest business model | Paid or clearly freemium from a real company. A "100% free forever" vault from an unknown developer is a red flag. |
| Breach monitoring (optional) | Some managers warn if your saved logins appear in known breaches — useful, not essential. |
Built-in browser saver vs dedicated manager
- Browser savers (Chrome, Edge, Safari) are convenient and far better than reuse — but usually tied to one ecosystem and with fewer features.
- Dedicated managers work across browsers/devices, generate stronger passwords, and typically undergo deeper security audits.
- Honest take: either beats sticky notes and reused passwords. Start with what you'll actually use; upgrade later.
Switching safely — checklist
0 of 6 completed
Master password tip: make it a passphrase — 5+ random words you'll remember (e.g. correct-horse-battery-staple style, but your own random words). Long beats complex, and never reuse it anywhere.