What is the best password manager?

Looking for a password manager that combines robust security with ease of use? We’ll review all of the most common password managers in this blog.

Product icons for Dashlane, Bitwarden, 1Password, LastPass, and iCloud keychain.

What are the best password managers? Although security is the top priority, password managers offer numerous different features, from authentication methods, to device syncing, to family and team plans. In this blog, we’ll cover all attributes of the best password managers and providers to keep you and your colleagues protected against hackers and account compromise.

How does a password manager work?

A password manager is a software tool that helps individuals securely store and manage their various passwords. The idea behind using a password manager is to create a single, strong password that serves as the "master password" for the password manager, and then use the password manager to generate and store complex, unique passwords for all of the different websites and services that the individual uses.One of the key features of a password manager is that it uses encryption to protect the passwords it stores. Encryption is a method of encoding information so that it can be read only by someone who has the key to decode it. In the case of a password manager, the encryption ensures that even if someone were to gain access to the password manager database, they would not be able to read the stored passwords without the master password.The password manager typically uses a form of symmetric-key encryption, where the same key is used for both encoding and decoding the data. This means that the password manager generates a random key, known as the "encryption key," and uses this key to encrypt the passwords it stores. When the user wants to access one of their stored passwords, they must enter the master password, which the password manager uses to unlock the encryption key and then decode the stored password.In addition to using encryption to protect the passwords it stores, a password manager may also offer other security features, such as the ability to automatically log the user into websites and apps, and the ability to generate random, complex passwords to help ensure that the user's accounts are more secure. Some password managers also offer additional security measures, such as biometric authentication, two-factor authentication, or hardware key authentication to protect sensitive data.

Easy for everyone: 1Password

1Password is a password manager that helps individuals securely store and manage their various passwords. It allows users to create a single, strong password that serves as their "master password" for the 1Password app, and then use the app to generate new passwords for all of the different websites and services that they use.One of the key features of 1Password is that it uses encryption to protect the passwords it stores. 1Password uses a form of symmetric-key encryption, where the same key is used for both encoding and decoding the data. This means that 1Password generates a random key, known as the "encryption key," and uses this key to encrypt the passwords it stores. When the user wants to access one of their stored passwords, they must enter the master password, which 1Password uses to unlock the encryption key and then decode the stored password.In addition to using encryption to protect the passwords it stores, 1Password also offers other security features, such as the ability to automatically log the user into websites and apps, and the ability to generate random, complex passwords to help ensure that the user's accounts are more secure. The product has great enterprise features, family plans, and collaboration features for secure password sharing, either via shared “password vaults” or with secure links that have configurable permissions (such as an expiration time); it can also store and autofill multi-factor authentication codes. The “travel mode” feature allows users to hide certain password vaults that may be preferable to not show abroad.1Password also offers additional security measures, such as two-factor authentication and storage for other data types (notes, credit card information, and passports), to further protect the user's information. 1Password offers an intuitive user interface, cross platform apps (Microsoft Windows, macOS, iOS, Android) , browser extensions for autofilling credentials (Chrome, Safari, Windows, Brave, Firefox, Edge), and it works on unlimited devices. The company also recently launched a partnership with Yubikey for hardware token access, another unique security feature.

Open-source: Bitwarden

Bitwarden is a password management tool that helps users securely store and manage their login credentials. The service offers a range of features, including the ability to store password and other sensitive information, automatically fill in login forms, and generate strong passwords.To use Bitwarden, users must first create an account on the Bitwarden website. From there, they can use the website or one of the Bitwarden apps (available for desktop and mobile devices) to create password entries for all of their online accounts. Each password entry is securely encrypted and stored on Bitwarden's servers.When a user needs to login to one of their online accounts, they can use the Bitwarden app to automatically fill in the login form with the correct username and password. This eliminates the need for users to remember multiple complex passwords and helps protect against password reuse.Bitwarden also offers additional features, such as the ability to share password entries with other users, and two-factor authentication for added security. Bitwarden has mobile apps as well, but they are a bit less polished. Overall, Bitwarden provides a convenient and secure solution for managing password and other sensitive information.

Feature-rich: Dashlane

Dashlane is a password manager that helps users securely store and manage their login credentials. The service offers a range of features, including the ability to store password and other sensitive information, automatically fill in login forms, and generate strong passwords.To use Dashlane, users must first create an account on the Dashlane website. From there, they can use the website or one of the Dashlane apps (available for desktop and mobile devices) to create password entries for all of their online accounts. Each password entry is securely encrypted and stored on Dashlane's servers.When a user needs to login to one of their online accounts, they can use the Dashlane app to automatically fill in the login form with the correct username and password. This eliminates the need for users to remember multiple complex passwords and helps protect against password reuse.One of the standout features of Dashlane is its password changer tool. This allows users to automatically update their passwords for all of their online accounts at once, with just a few clicks. This can be a huge time-saver for users who have a lot of online accounts, and it can also help improve password security by ensuring that all of a user's passwords are strong and up-to-date.Another useful feature of Dashlane is its security alert system. This alerts users if any of their saved passwords have been involved in a data breach, so that they can take action to protect their accounts. This can be especially useful in the event of a major data breach, when many users' login credentials may be at risk.In terms of pricing, Dashlane offers a free version of its password manager that includes many of the core features, such as the ability to store password and other sensitive information, automatically fill in login forms, and generate strong passwords. The premium plans on Dashlane, which includes the password changer tool and security alerts, are available for a monthly or annual subscription fee. Dashlane also allows uses to take advantage of 1 GB of secure file storage.Compared to other password managers, Dashlane offers a strong set of features and a user-friendly interface. Its password changer tool and security alert system set it apart from many of its competitors, and make it a valuable tool for anyone looking to improve their password security.

LastPass

UPDATE: We no longer recommend LastPass due to the recent massive breach of customer data, including both encrypted vaults and unencrypted URL data. The information below is preserved from an early version, but we recommend you choose another option from this list.LastPass is a password manager that helps users securely store and manage their login credentials. The service offers a range of features, including the ability to store password and other sensitive information, automatically fill in login forms, and generate strong passwords.To use LastPass, users must first create an account on the LastPass website. From there, they can use the website or one of the LastPass apps (available for desktop and mobile devices) to create password entries for all of their online accounts. Each password entry is securely encrypted and stored on LastPass's servers.When a user needs to login to one of their online accounts, they can use the LastPass app to automatically fill in the login form with the correct username and password. This eliminates the need for users to remember multiple complex passwords and helps protect against password reuse.LastPass also offers additional features to help users improve their password security. For example, the LastPass password generator can create strong, unique passwords for each of a user's online accounts. This helps protect against common hacking techniques that rely on the use of weak or easily guessable passwords. Similar to 1Password, Dashlane, and other good password managers, LastPass allows for cloud storage to be used for securely storing encrypted files (the free plan has only 50 MB of storage, however).LastPass also offers a security challenge feature, which analyzes a user's saved passwords and provides recommendations for improving password security. This can include suggestions for updating old or weak passwords, or for using the LastPass password generator to create stronger passwords.LastPass also offers a range of premium features for users who want even more control over their password security. For example, the premium version of LastPass includes two-factor authentication, which provides an additional layer of security by requiring users to enter a second form of authentication (such as a code sent to their phone) in addition to their password.

Free: KeePass

KeePass is a free and open-source password manager that helps users securely store and manage their login credentials for various online accounts. The service offers a range of features, including the ability to store password and other sensitive information, automatically fill in login forms, and generate strong passwords.To use KeePass, users must first download and install the KeePass software on their computer. Once the software is installed, they can create a password database, which is where their password and other sensitive information will be stored.KeePass uses strong encryption to protect the password database, which ensures that the information it contains is secure and cannot be accessed without the user's KeePass account. When a user needs to login to one of their online accounts, they can use the KeePass software to automatically fill in the login form with the correct username and password.KeePass also offers additional features to help users improve their password security. For example, the KeePass password generator can create strong, unique passwords for each of a user's online accounts. This helps protect against common hacking techniques that rely on the use of weak or easily guessable passwords.KeePass is available for all operating systems - Windows, macOS, Linux - and on mobile devices; it can also be downloaded and installed for free from the official KeePass website (https://keepass.info/). It is a popular choice among users who want an open-source password manager with a wide range of features; as a result, it is one of the best free password managers that we recommend.

Built in: Chrome and Apple

Both Google Chrome and Apple's Safari web browser include built-in password managers. These password managers are designed to help users securely store and manage their login credentials for various online accounts.The password manager in Google Chrome and Chrome OS is creatively called Password Manager, and it is integrated into the browser itself. It allows users to store password and other sensitive information, and to automatically fill in login forms when they need to login to one of their online accounts.The password manager in Safari and on iPhones is called iCloud Keychain, and it is part of the iCloud suite of services. Like Password Manager, iCloud Keychain allows users to store password and other sensitive information, and to automatically fill in login forms when they need to login to one of their online accounts.Both Password Manager and iCloud Keychain use strong encryption to protect the password and other sensitive information that they store. This ensures that the information is secure and cannot be accessed without the user's password manager account. Both also do not limit the number of devices that can be used and allow for unlimited passwords to be kept.Overall, the built-in password managers in Google Chrome and Safari provide convenient and secure solutions for managing passwords and simple device syncing. They are easy to use and integrate seamlessly with the web browsers, making them valuable add ons for users who want to improve their online security.

Popular but proprietary: NordPass

NordPass is a password manager that aims to provide users with a secure and convenient way to store and manage their passwords. It offers a range of features including password generation, password storage, and password sharing. Unsurprisingly, NordPass is associated with the team behind the NordVPN VPN product.One of the main strengths of NordPass is its security. It uses “military-grade” (also known as “zero knowledge” encryption, but meaning end-to-end encryption) encryption to protect user data, and also offers features like two-factor authentication and biometric login to add an extra layer of protection. In addition, NordPass has a user-friendly interface that makes it easy to use and navigate.One potential downside of NordPass is its cost. While it does offer a free version, many of its more advanced features are only available on the paid plans. This may not be a problem for some users, but others may prefer a password manager that offers more features for free.Overall, NordPass is a solid choice for those looking for a secure and convenient way to manage their passwords. While it may not be the cheapest option on the market, its strong security features and user-friendly interface make it worth considering. So, it can be a good choice for those who are willing to pay for added security and convenience.

An end-to-end encrypted collaboration suite

Using a password manager is a great first step to great cybersecurity practices. Once you’ve selected one for you and your team, we highly recommend also switching to a fully private, end-to-end encrypted platform for email, file sharing, collaboration, and more.Skiff Mail is a private, end-to-end encrypted email product that’s simple and easy to use. With native applications on Android, iOS, macOS, and more, Skiff Mail is simple to integrate and builds in privacy from the ground up. It also includes 10 GB of storage, as well as products for note taking, an integrated private calendar, and file storage.If you have any questions about this blog, reach out to us on Twitter, Reddit, or email [email protected].