How to Choose a Password Manager: What Actually Matters
If you only make one change to protect your accounts, make it this: stop reusing passwords and start using a password manager. A good one creates a unique, long password for every site, fills it in for you and keeps everything encrypted. The hard part is choosing between the many options. This guide covers the features that genuinely matter and the ones that are mostly marketing.
Why a password manager beats memory
People reuse passwords because remembering dozens of strong ones is impossible. Attackers rely on that habit: when one site is breached, they try the same email and password combination everywhere else. A manager removes the temptation by remembering for you, so every account can have a different random password.
The features that matter
- Strong, audited encryption. Look for zero-knowledge design, meaning the company cannot read your vault, and for published independent security audits.
- A strong master password and recovery plan. The manager is only as safe as the password that unlocks it. Make sure you understand what happens if you forget it.
- Two-factor protection for the vault itself. Support for authenticator apps, passkeys or hardware keys is a must.
- Autofill that works on your devices. Browser extensions, a phone app and desktop support should all be reliable, or you will stop using it.
- Breach and weak-password alerts. Useful for cleaning up old accounts.
- Secure sharing. Important if you share logins with family or a team.
Built-in managers versus standalone apps
Browsers and phone operating systems now include free password managers. They are convenient and far better than reusing passwords. Their limits are usually cross-platform support, sharing and advanced recovery. If you stay in one ecosystem, a built-in manager can be enough. If you use mixed devices, a dedicated app is usually smoother.
Free or paid?
Several reputable managers have a solid free tier for one person. Paid plans typically add family sharing, emergency access, larger file storage and integrated authenticator codes. Pay only if you will use those extras.
| Question to ask | Good answer |
|---|---|
| Who can read my vault? | Only me (zero-knowledge) |
| Has it been independently audited? | Yes, with public reports |
| Does it support 2FA or passkeys? | Yes, including hardware keys |
| Can I export my data? | Yes, in a standard format |
How to switch without stress
- Pick a manager and create a long master password, ideally a passphrase of four or more random words.
- Turn on two-factor authentication for the vault.
- Import saved passwords from your browser, then delete them from the browser.
- Change the passwords on your most important accounts first: email, banking and your Apple, Google or Microsoft account.
- Update the rest gradually whenever a site prompts you to log in.
