Your password problem is bigger than you think
I counted my own logins once and stopped at 87. Email, banking, shopping, streaming, old forums from 2019, food delivery apps. Guarding all of that? Four passwords. One of them protected both my email and my bank account.
That is the actual problem a manager solves. The real threat is not a hacker guessing your password. It is duller: some forgotten forum gets breached, and a script tries your leaked email and password on Gmail, Amazon, and your bank. Seconds, not hours. If you reuse passwords, one breach becomes all of them. Our guide on how to create a strong password starts with uniqueness, not complexity.
What a password manager actually does
A manager is a locked vault with one key: your master password, the single password you do need to remember. Inside it, every account gets its own long, random password. When you log in, the manager fills it in, syncs across your phone and laptop, and the good ones warn you when a password shows up in a known breach.
That is it. One password you can remember, and every account stands alone.
Prefer watching? This one makes the case better than text can.
Built-in or dedicated? The honest 2026 answer
Here is my honest stance: most people do not need to pay for one. If you live entirely inside Apple, the built-in Passwords app is genuinely good now. If you live inside Google and Chrome, Google Password Manager covers the same ground. Both are free, both sync, both handle passkeys.
A dedicated manager is worth it in three cases. Mixed devices, like an iPhone plus a Windows laptop. Sharing, where families split streaming and utilities and need shared vaults. And extras: breach alerts and emergency access. If none of that sounds like you, the free built-in option is the right call.
Passkeys do not kill the manager, either. They cover your email and bank, but the other 90 accounts on your list still want passwords, and a manager holds both. See passphrase vs password for the difference.
Do the five-minute worth-it test
Stop debating in the abstract and run the numbers. Open your browser's saved passwords and count how many logins you have, and how many distinct passwords cover them. If one password covers your email, your shopping, and your bank, the test is over. You need a manager.
Take a friend of mine as the worked example. Sara had 63 saved logins and two passwords, and one of them covered 41 accounts, including her email. When a small shopping site she used in 2022 got breached, her leaked password was tried against her email within days, and she spent a whole Saturday resetting accounts. A free manager would have cost her zero and one evening of setup. One evening versus one very bad Saturday.
Set it up in one evening
Pick one manager and install it. Free is fine. Set a master passphrase of four random words, and write it on paper kept somewhere safe at home.
Import your saved passwords from your browser. Then change your ten most important accounts first: email, bank, shopping, cloud storage, anything tied to payments. Generate each new password with the manager, or with our free password generator. Work through the rest over the following week, and turn on two-factor authentication for email and bank.
That is the whole project. One evening, not one weekend.
The one risk, and how to handle it
Is it not risky to put everything in one place? Fair question. Here is the uncomfortable truth: a forgotten master password usually locks you out for good, because even the company cannot undo the encryption. That means the master password is the one password you cannot afford to lose.
So handle it like it matters. Paper copy at home. Emergency access for your partner or a sibling. An encrypted export twice a year. Do those three things and the worry mostly evaporates. For home Wi-Fi, where a manager feels like overkill, our strong Wi-Fi password guide covers the simpler setup.
Bottom line: if you reuse passwords, a manager is worth it, and the free one on your phone probably already is one. Install it tonight and change your email and bank passwords first.
Frequently asked questions
Is a free password manager good enough?
For most people, yes. A free manager or the built-in tool on your phone covers the core job: one unique, strong password per account, synced across your devices. Paid plans add extras, but free fixes the actual problem.
What happens if I forget my master password?
With most managers, a forgotten master password means you are locked out of the vault, because the company cannot decrypt it for you. Write it on paper, store it somewhere safe, and set up emergency access before you need it.
Do passkeys make password managers pointless?
Not yet. Passkeys cover your email and bank, but most of the internet still runs on passwords. A manager handles the other 90 or so accounts, and most managers store passkeys too.
Is it safe to put all my passwords in one place?
Safer than reusing a few passwords everywhere. A reputable manager encrypts your vault on your device, so even the company cannot read it. One strong master password plus two-factor authentication beats 80 reused passwords every time.
Comments
Loading comments...
Leave a comment