🗝️ Password Manager Guide
A password manager remembers a unique, random password for every site — so you only memorize one strong master password. No brand rankings here (those are usually ads) — instead, learn how to evaluate any manager yourself.
⚠️ Ethical Use Only: These tools are for defensive purposes — securing your own accounts and systems. Never use security knowledge against systems you do not own or lack written permission to test.
🧠 Why it matters
Password reuse is how one small breach becomes ten hacked accounts: attackers automatically try stolen email+password pairs on banks, email, and social media ("credential stuffing"). A manager makes unique passwords effortless — generate, save, autofill.
📋 What actually matters when choosing
| Feature | What "good" looks like |
|---|---|
| Zero-knowledge encryption | The company cannot see your passwords — only you hold the key. Non-negotiable. |
| Open source + independent audits | Code anyone can inspect, plus published third-party security audits. Marketing claims alone aren't evidence. |
| Strong master-password policy | Encourages a long passphrase; supports 2FA/MFA to unlock the vault. |
| Works on all your devices | Phone + computer + browser, with reliable sync — otherwise you'll stop using it. |
| Import / export | You can leave any time with your data. Avoid lock-in. |
| Honest business model | Paid or clearly freemium from a real company. A "100% free forever" vault from an unknown developer is a red flag. |
| Breach monitoring (optional) | Some managers warn if your saved logins appear in known breaches — useful, not essential. |
🆚 Built-in browser saver vs dedicated manager
- Browser savers (Chrome, Edge, Safari) are convenient and far better than reuse — but usually tied to one ecosystem and with fewer features.
- Dedicated managers work across browsers/devices, generate stronger passwords, and typically undergo deeper security audits.
- Honest take: either beats sticky notes and reused passwords. Start with what you'll actually use; upgrade later.
🔄 Switching safely — checklist
0 of 6 completed
💡 Master password tip: make it a passphrase — 5+ random words you'll remember (e.g. correct-horse-battery-staple style, but your own random words). Long beats complex, and never reuse it anywhere.