Password managers

A password manager generates and stores a unique, long password for every account behind one master password (or passkey/biometric unlock). It's the single most effective everyday change most people can make.

Why it's safe to trust one

Reputable password managers encrypt your data before it ever leaves your device, meaning the provider itself can't read your stored passwords even if their servers were breached. The realistic alternative, reusing memorable passwords everywhere, is significantly riskier than trusting a well-established password manager.

What still matters

The master password protecting the vault needs to be strong and unique, and multi-factor authentication should be enabled on the password manager account itself, since it's now the single point that protects everything else.