How to choose a password manager

Why use a password manager at all?

Because it lets you use a different strong password for every account without remembering any of them. The NCSC lists what password managers usually do:

• create a strong, unique password for each account
• fill it in automatically when you log in
• sync your passwords across your devices
• warn you if a password has been breached or leaked

If you're unsure whether they're safe to rely on, read are password managers safe? first.

Should I use the one built into my phone or browser?

Start there. The NCSC says the password managers in the major browsers, such as Chrome, Edge and Safari, are safe to use on your own devices. It advises never saving passwords in the browser on a shared public computer.

• Apple Passwords stores passwords, passkeys, Wi-Fi passwords and verification codes. Apple says it works on iOS 18, iPadOS 18, macOS Sequoia and visionOS 2 or later, and that with iCloud for Windows you can use your passwords in Chrome or Edge on a Windows PC.
• Google Password Manager works on Android, on computers through Chrome, and on iPhone and iPad, according to Google. It saves passwords and passkeys to your Google Account.

The NCSC says the main advantage of a standalone password manager is that it can sync passwords when you have a mix of different browsers and devices.

What should I check before choosing one?

1. Does it work on every device and browser you use? Include work laptops and a partner's or child's devices if you'll share.
2. Is your vault encrypted so the provider can't read it? Look for end-to-end or "zero-knowledge" encryption in the provider's security documentation.
3. Can you turn on two-step verification for the account? The NCSC says this means a criminal who learns your master password still can't get in. See what two-factor authentication is.
4. Does it store passkeys? The NCSC recommends passkeys over passwords wherever they're available. See what a passkey is.
5. Does it warn you about weak, reused or breached passwords?
6. Can you share passwords with family, if you need to, without sending them by message?
7. What happens if you forget your master password? The NCSC notes many offer recovery options such as password hints or emergency access through trusted contacts.
8. Can you export your passwords if you decide to move to another provider later?
9. Has it published an independent security audit? A report from an outside firm, available to read, is stronger evidence than a claim on a sales page.
10. What does it cost after the first term? Note the renewal price and date when you sign up, in case it differs from what you paid at first.

Whichever you choose, the master password protects everything else. Make it long and use it nowhere else: three random words work well. See how to create a strong password.

How do the options compare?

This table sets out features as each provider describes them on its own pages. It is not a ranking, and we have not tested these products ourselves. NordPass and Proton Pass are the two standalone password managers we have affiliate links for; Apple Passwords and Google Password Manager are included because many readers already have them. Features checked 25 September 2026.

Prices change often and depend on the plan length, so we haven't listed them. Check the current price and the renewal price on the provider's own page before you pay. NordPass offers a 30-day money-back guarantee on its paid personal plans.

Some details worth knowing from the providers' own help pages:

• Google's on-device encryption means only you have the key to your passwords. Google warns that if you lose all your recovery options, you could lose your saved passwords, and that once it's set up it can't be removed.
• Apple's passkeys need iCloud Keychain and two-factor authentication turned on for your Apple Account.
• Proton Pass's free plan includes 10 hide-my-email aliases; the paid Pass Plus plan adds unlimited aliases and a built-in two-factor authenticator.

How do I move to a new password manager?

1. Pick one and install it on every device you use, from the provider's own website or official app store listing.
2. Import your saved passwords from your browser or old password manager, using the new one's import tool if it has one. Proton Pass, for example, lists password import among its free features.
3. Turn on two-step verification for the new account straight away.
4. Start with your most important accounts. Change reused passwords on your email first, because it can reset everything else, then banking and shopping.
5. Switch off saving in your old browser manager once everything is in the new one, so you don't end up with two out-of-date copies.

Want to know how strong one of your passwords is? Our Password Check runs entirely on your device, so what you type isn't sent anywhere.

Common questions

Is the password manager built into my phone good enough?

For many people, yes. The National Cyber Security Centre says the password managers built into the major browsers are safe to use on your own devices. They work best when all your devices come from the same company. If you mix Apple, Android and Windows devices, a standalone password manager can keep your passwords in sync across all of them.

Is a free password manager safe?

For the two standalone options in our comparison, the free and paid plans differ in features such as how many devices you can use, sharing and breach monitoring. NordPass says its free plan doesn't include multiple device access, while Proton Pass says its free plan works on unlimited devices. Whatever you choose, protect it with a strong master password and two-step verification.

What happens if I forget my master password?

It depends on the provider. The National Cyber Security Centre notes that many password managers offer recovery options, such as password hints or emergency access through trusted contacts. Set up whatever recovery your provider offers on the day you start using it, because some are designed so that the company itself can't read or reset your vault.

Can I share passwords with my family?

Yes, most password managers have a way to do it. Apple Passwords uses Shared Groups, Google Password Manager lets you share with members of your Google family group, and NordPass and Proton Pass both offer family plans for up to six people.

Sources

• Top tips for staying secure online: managing your passwords — National Cyber Security Centre (opens in a new tab)
• Passkeys: what you need to know — National Cyber Security Centre (opens in a new tab)
• Use the Passwords app to create, manage and share passwords and passkeys across Apple devices — Apple Support (opens in a new tab)
• About the security of passkeys — Apple Support (opens in a new tab)
• Get started with Google Password Manager — Google Account Help (opens in a new tab)
• Get started with on-device encryption — Google Account Help (opens in a new tab)
• Manage passwords in Chrome — Google Chrome Help (opens in a new tab)
• Free and Premium plans — NordPass (opens in a new tab)
• NordPass security explained — NordPass (opens in a new tab)
• Passkeys — NordPass (opens in a new tab)
• NordPass Business undergoes a security audit — NordPass (opens in a new tab)
• Proton Pass pricing and plans — Proton (opens in a new tab)
• Proton Pass security — Proton (opens in a new tab)
• Proton Pass free plan and trial — Proton Support (opens in a new tab)
• Proton Pass is open source and audited for security — Proton (opens in a new tab)
• Proton's password manager passes audit by top security firm — Proton (opens in a new tab)

Last checked: 25 September 2026