Most of us have dozens of online accounts and only a handful of passwords we can actually remember. That gap is exactly what criminals rely on, and it is the problem a password manager is designed to solve.
Quick answer: A password manager is an app that creates, stores and fills in strong, unique passwords for every account, locked behind one master password. To start, pick a reputable manager, create a long master passphrase, turn on two-step verification, install the browser extension and phone app, then update your most important passwords first.
What is a password manager?
A password manager is a secure digital vault for your logins. Instead of remembering forty different passwords, you remember one strong master password, and the manager handles the rest.
Most password managers can:
- Generate long, random passwords for new accounts.
- Save logins automatically when you sign in.
- Fill in usernames and passwords on websites and apps.
- Sync your vault across your laptop, phone and tablet.
- Warn you about weak, reused or exposed passwords.
Why do I need one?
The biggest risk with passwords is reuse. If you use the same password on several sites and one of those sites suffers a data breach, criminals can try that email and password combination everywhere else. This is called credential stuffing, and it is automated and widespread.
The UK’s National Cyber Security Centre recommends using a password manager as part of its top tips for staying secure online, alongside strong passwords and two-step verification. A password manager makes it realistic to have a different password for every account without needing a superhuman memory.
Are password managers safe?
It is a fair question: putting all your passwords in one place sounds risky. In practice, reputable password managers are far safer than the alternatives most people use, such as reused passwords, notes on a phone or a spreadsheet.
Here is why:
- Encryption: your vault is scrambled so it can only be read with your master password. Encryption turns data into unreadable code without the right key.
- Zero-knowledge design: many managers are built so the company itself cannot see your passwords.
- Two-step verification: you can require a second check, such as a code on your phone, before anyone opens your vault.
The weak point is usually the master password, which is why choosing it carefully matters so much.
Types of password manager
| Type | Examples | Good for | Things to consider |
|---|---|---|---|
| Built into your browser | Chrome, Edge, Firefox, Safari | Getting started quickly | Works best if you stick to one browser |
| Built into your device | Apple Passwords / iCloud Keychain, Google Password Manager | People mostly in one ecosystem | Cross-platform support varies |
| Standalone app | Dedicated password manager services | Mixed devices, families, sharing | May have a subscription for full features |
There is no single right answer. If you use an iPhone and a Mac, Apple’s built-in option may cover you. If you use an Android phone and a Windows laptop, Google’s manager or a standalone app might suit you better. Families who want to share logins securely often prefer a standalone service.
How to choose a password manager
When comparing options, look for:
- Works on all your devices: Windows, macOS, Android, iPhone and the browsers you use.
- Strong security basics: end-to-end encryption and support for two-step verification.
- Good reputation: an established provider that publishes security information and has been independently audited.
- Easy importing: the ability to bring in passwords saved in your browser.
- Recovery options: a clear way to regain access if you lose a device.
- Sharing: if you need to share accounts with family members.
- Passkey support: many managers can now store passkeys, a newer sign-in method that replaces passwords with a secure key on your device.
Free versions are fine for many people. Paid plans typically add extras such as family sharing or more storage for secure notes, so check what is included before you sign up.
How to set up a password manager step by step
1. Create a strong master password
Your master password is the one password you must remember. The best approach is a passphrase: several random words strung together, such as three or four unrelated words. It is long, which makes it hard to crack, but easier to remember than a jumble of symbols.
- Never reuse it anywhere else.
- Write it down once and keep it somewhere physically secure at home, not on your phone.
2. Turn on two-step verification
Add a second layer of protection to your vault using an authenticator app, a security key or another method your manager supports. Our guide to two-factor authentication explained walks through the options in plain English.
3. Install it everywhere
Install the browser extension on your laptop and the app on your phone. On phones, look in your settings for a section about passwords or autofill, and choose your password manager as the default autofill service.
4. Import your existing passwords
Most managers can import passwords saved in your browser. Once imported, consider turning off the browser’s own password saving so you do not end up with two half-complete lists.
5. Fix your most important accounts first
Do not try to change every password in one evening. Start with the accounts that matter most:
- Your main email account (it can be used to reset everything else).
- Online banking and payment apps.
- Your Apple, Google or Microsoft account.
- Social media accounts.
- Shopping sites that store your card details.
For each one, use the manager’s generator to create a new, long, random password and save it.
6. Work through the rest gradually
Each time you log in to another site, let the manager update the password. Within a few weeks most of your accounts will be covered. Many managers include a security report that highlights weak or reused passwords, which makes a handy to-do list.
Common worries, answered
“What if I’m not at my own device?” Most managers have a secure web vault or a phone app, so you can look up a password when you need it.
“What if the company goes out of business?” Reputable managers let you export your vault. It is sensible to know where that option is, but store any export file carefully because it may not be encrypted.
“Is it hard to use?” After the first week, most people find it easier than typing passwords, because the manager fills them in for you.
“What about my family?” Many managers offer family or shared vaults, so you can share the streaming login or the household energy account without texting passwords around. Each person keeps their own private vault as well.
“Will autofill work in apps as well as websites?” On most modern phones, yes. Once you set your password manager as the autofill service, it can offer to fill logins inside apps too, not just in the browser.
Good habits to pair with a password manager
A password manager is one part of staying safe online. Keep your devices updated, be wary of messages asking you to log in through a link, and use two-step verification on important accounts. The US Cybersecurity and Infrastructure Security Agency’s Secure Our World pages cover these basics clearly.
If you are planning a wider tidy-up of old accounts and apps, our digital declutter weekend plan is a good companion to this guide. You can also find more plain-English tech guides on our tech hub.
The short version
- A password manager stores strong, unique passwords behind one master password.
- Reusing passwords is the main risk it protects you against.
- Choose one that works on all your devices and supports two-step verification.
- Use a long passphrase as your master password and keep a secure offline backup.
- Update your email, banking and main account passwords first, then the rest over time.
At ConnectionCafe.com we think a password manager is one of the simplest, most effective security upgrades anyone can make.
