Reused passwords are how most accounts get taken over. One site leaks, and attackers try that password everywhere else. A password manager fixes this by giving every account its own password. You don’t have to remember any of them.
This takes about ten minutes. Have your phone nearby.
The steps
Install the app on your phone and computer
Get it from your phone’s official app store and the company’s own website. Add the browser extension on your computer.
Create your master password
Use four or five random words, like a short odd sentence. Write it on paper and keep it at home until it sticks.
Turn on two-step sign-in
Find it under Settings → Security. Use an authenticator app if you can. Save the recovery code somewhere safe.
Save your email password first
Sign in to your email. When the manager offers to save, say yes. Then change it to a new generated password.
Which one should you use?
Our picks
Ranked by our reviewers on security, ease of use, and recovery options. Check each site for current pricing.
Bitwarden — free tier
Open source. Unlimited passwords across all your devices on the free plan. Best place to start.
1Password
Polished apps, strong family sharing, and a helpful recovery setup. Paid only.
Bitwarden — paid plans
Adds built-in two-step codes and security reports to the free version.
Built into your phone or browser
Apple Passwords and Google Password Manager are free and fine if you stay in one ecosystem.
Next: a 3-step follow-up
Sources
- NIST Special Publication 800-63B, Digital Identity Guidelines: Authentication. pages.nist.gov
- CISA, “Use Strong Passwords.” cisa.gov
- FTC Consumer Advice, “How To Protect Your Personal Information.” consumer.ftc.gov
- Bitwarden, plans and pricing page. bitwarden.com
Spotted an error? corrections@encryptedcafe.com.