Password Managers Guide

A password manager is a secure app that remembers all your passwords for you. Instead of trying to keep dozens of passwords in your head (or writing them on sticky notes), you only need to remember one strong password, your master password. The password manager takes care of the rest.

Think of it like a locked safe for all your keys. You have one combination to open the safe, and inside you will find every key you need, neatly organised and ready to use.

It is natural to reuse the same password across different websites. Most of us have done it. The problem is that if criminals get hold of that password from one website (which happens more often than you might think), they can then try it on all your other accounts, your email, your bank, your social media, and more.

This is called "credential stuffing" and it is one of the most common ways people lose access to their accounts. Using a unique password for every account stops this from working.

Password managers help in several important ways:

• They create strong, unique passwords, long, random passwords that are very difficult to guess, one for each of your accounts.
• They fill in passwords automatically, so you do not need to type them or remember them.
• They warn you about risks, many will tell you if a password has appeared in a known data breach, or if you are reusing a password somewhere.
• They are encrypted, your data is scrambled so that only you can read it, even the company running the password manager cannot see your passwords.

There are several well known, reputable password managers available. When choosing one, look for:

• A strong reputation, choose a well established provider that has been independently reviewed.
• End to end encryption, this means only you can see your data.
• Works on all your devices, your phone, tablet, and computer should all be covered.
• A free option, many good password managers offer a free tier that covers the basics perfectly well.

Some popular options in the UK include Bitwarden (free and open source), 1Password, and the built in password managers in Apple and Google devices. The National Cyber Security Centre (NCSC) recommends using a password manager and has helpful guidance on their website.

Getting started is straightforward. Follow these steps at your own pace:

• Choose a password manager that works on your devices
• Download and install it on your phone and computer
• Create your master password, make it long and memorable (three random words work well)
• Enable two step verification on your password manager account if offered
• Start adding your most important accounts first (email, banking, shopping)
• Let the password manager generate new, strong passwords for each account as you go
• Install the browser extension so it can fill in passwords on websites automatically
• Set a reminder to review and update weak passwords over the next few weeks

• Never share your master password with anyone.
• Keep your password manager app and browser extension up to date.
• Use the password generator whenever you create a new account.
• If your password manager offers a security check or audit, run it occasionally to find weak or reused passwords.
• Write down your master password and store it somewhere safe at home (not on your computer) in case you forget it.

"What if the password manager gets targeted by criminals?"

Reputable password managers encrypt your data so that even if their servers were compromised, criminals would not be able to read your passwords. This is why choosing a trusted provider with strong encryption matters.

"Is it not risky putting all my passwords in one place?"

It is a fair question. In practice, using one well protected password manager is far safer than reusing the same password everywhere or keeping passwords in a notes app or on paper near your computer. The NCSC recommends this approach.

"I am not very technical, can I still use one?"

Absolutely. Modern password managers are designed to be simple. Once set up, they work quietly in the background, filling in your passwords whenever you need them. You do not need any technical knowledge to use one.

"What about the passwords saved in my web browser?"

Browser based password saving (like Chrome or Safari's built in feature) is better than nothing, and is fine for many people. A dedicated password manager offers extra features like security alerts and easier cross device access, but using your browser's built in option is a perfectly good starting point.