Key Takeaways
- A password manager stores all your credentials in one encrypted vault, so you only need to remember one strong master password.
- Most password managers offer browser extensions and mobile apps that fill in credentials automatically when you log in.
- You can import passwords saved in your browser to avoid re-entering them manually.
- A strong master password and a backup recovery method are the two most important setup steps to get right from the start.
- Using a password manager makes it practical to have a unique, complex password for every account.
What you will need
Why a password manager changes how you handle credentials
The average person has dozens of online accounts. Remembering a unique, complex password for each one is not realistic without help, so most people reuse passwords or keep them simple. Either habit creates a real problem: if one site you use has a data breach, attackers will try that same password on your email, bank, and other accounts.
A password manager solves this by acting as an encrypted vault. You remember one strong master password; the manager handles everything else. It generates long, random passwords for each account, stores them securely, and fills them in when you log in. The encryption used by reputable services means the stored data is unreadable without your master password, even if the company's servers were accessed without authorization.
Browser autofill can seem like it does the same job, but it has meaningful limitations. See why browser autofill gets things wrong for a detailed comparison. A dedicated password manager gives you more control, works across different browsers and devices, and is not tied to one company's ecosystem.
What you will need
How to set up your password manager
The steps below walk through setting up a password manager from scratch on a desktop computer, with notes on extending access to your phone. The process takes most people between 20 and 45 minutes for the initial setup. Updating all your passwords is a longer project you can spread over several sessions.
Choose and sign up for a password manager
Password managers generally fall into two categories: standalone services with their own apps and browser extensions, and built-in options inside browsers or operating systems. Standalone services tend to offer broader device support and more control. Built-in options (such as those in Chrome, Safari, or Windows) are convenient but tie your credentials to a specific ecosystem.
When you find a service you want to try, create an account using a valid email address. Most services offer a free tier that is sufficient for personal use.
Create a strong master password
Your master password is the one credential you will need to remember. Every other password in your vault is protected by it, so it needs to be both strong and memorable.
A reliable method is to build a passphrase: string together four or more unrelated words (for example, turtle-lamp-cider-blanket) and add a number or symbol. This produces a password that is long enough to resist guessing but easier to recall than a random string of characters.
Write the master password down on paper and store it somewhere physically secure, such as a locked drawer. Do not save it in a digital note or email it to yourself.
Set up a recovery method
Before adding a single password, configure your account recovery options. Most password managers offer at least one of the following: a recovery email link, a printed emergency kit (a PDF with your account details and a one-time recovery code), or a trusted contact who can authorize access.
Download and store the emergency kit now if your service provides one. Treat it like an important document and keep it somewhere safe offline.
Install the browser extension and mobile app
Go to your browser's extension store and install the official extension for your password manager. Once installed, log in with your new account. The extension icon will appear in your browser toolbar and will activate automatically when it detects a login field on a webpage.
On your phone, download the app from the App Store or Google Play. In your phone's settings, enable autofill and select your password manager as the autofill provider. The exact path varies by phone model, but it is usually under Settings, then General or Passwords.
Import your existing passwords
If you have passwords saved in your browser, you can export them as a CSV file (a plain spreadsheet format) and import them into your vault.
In Chrome, go to Settings, then Passwords, then the export option. In Firefox, go to Logins and Passwords, then Export. Save the file to your desktop, then use the import function in your password manager's web dashboard or app to upload it.
Once the import is complete and you have confirmed the passwords are visible in your vault, delete the CSV file from your computer. The file is unencrypted, so leaving it on your device is a security risk.
Start replacing weak or reused passwords
Most password managers include a built-in password generator and a security report that flags reused or weak passwords across your accounts. Start with your most sensitive accounts: email, banking, and any account tied to a payment method.
For each one, use the password manager's generator to create a new, unique password of at least 16 characters. Save the new password in the vault before you submit the change on the website, so you do not get locked out mid-process. For guidance on what to do if a lockout happens anyway, see account recovery steps.
Making it part of your daily routine
The setup is only useful if the tool becomes automatic. For the first week, make a point of letting the browser extension fill in passwords rather than typing them yourself. This builds the habit and quickly reveals any accounts that did not import correctly.
When you create a new account anywhere, open the password manager's generator to create the password rather than inventing one on the spot. Save it to the vault before you submit the registration form.
If you manage finances online, a password manager pairs well with other digital habits. Digital wallets and scheduled bill pay are two other tools that reduce the manual work of managing accounts. For building broader digital routines, automating your finances covers how background routines can reduce the number of decisions you need to make each week.
Check for a family or shared plan
Many password manager services offer shared plans that let multiple people maintain separate private vaults under one subscription. If you live with a partner or family members who also need better password habits, a shared plan can be more cost-effective than individual accounts.