Technology

The best password managers for stress-free logins

We all struggle to keep track of which passwords sync to which site – here are the best, most secure password managers to help you out.

Image may contain File and Electronics

Our editors work with affiliates when we select some or all of the products featured. We will receive compensation from retailers and/or from purchases through these links.

What is a password manager?

A password manager is your best friend if you're prone to forgetting how to sign into sites online. It's your one-stop-shop for logging into anything from Facebook and Netflix to important work programmes, with automatic password filling, automatic password generating to sign in quickly, and secure encryption so you can browse online safely.

Every time you log into a website you can select to store that password in a safe location on your browser or desktop so that the next time you go to log in, it will auto-fill the password with zero fuss.

All of the services and applications above are “zero-knowledge”, which means that they don’t know what your master password is and have no access to your stored passwords. This is important for your security, but if you forget your login information, your only option is to reset your entire vault, wiping out your stored passwords.

Although some have account recovery options using a saved biometric login or a previously created one-time password, it’s your responsibility to remember or securely record your master password. And while you might be tempted to bring out the sticky notes again, remembering one password is a lot better than dozens.

How does a password manager work?

A password manager securely stores your login details in an encrypted vault, typically locked by a strong master password. When you visit a website or app, password managers can automatically fill in your username and password after you've unlocked the vault.

Most password managers also feature a password generator to create strong, unique passwords, and many can synchronise your encrypted data across multiple devices. They enhance security by eliminating the need to remember multiple complex passwords and often include features like password health checks and data breach monitoring, all contributing to a more secure and convenient online experience.

Making the most of your password manager

Just having a password manager isn’t enough. As with any tool, you’ll get the best results by using it in an intentional and considered manner:

  • Use a long, unique, and personally memorable master passphrase. Short (25 to 50 character) strings of words are much easier to remember than a jumble of letters, numbers and special characters. Avoid popular quotations, though.
  • Use your password manager’s password generator to create unique passwords for everything else. We recommend 16-character random passwords for anything you won’t have to manually type in on a regular basis.
  • Stick to one password manager on all the browsers and devices you use. Avoid saving passwords locally on each device.
  • If you use a “zero-knowledge” password manager that can’t unlock your passwords if you forget your master password or secret, make sure that you note down and securely store any mnemonic tools that you need.
  • Consider setting up emergency contacts so that your loved ones can access your passwords in case anything happens to you.

What’s the difference between a password and passkey?

A password is a secret string of characters you create and remember to access online accounts. When you log in, the website checks if your typed password matches its stored version. Passwords can be vulnerable to things like data breaches but a password manager can alert you to this, enabling you to act quickly to change them.

Meanwhile, a passkey is a more secure cryptographic credential built on the FIDO (Fast Identity Online) standard. They involve a public key stored with the website and a private key kept securely on your device. Logging in with a passkey involves your device using its private key to sign a challenge from the website, which then verifies it with the stored public key. Passkeys are typically more secure, as well as more convenient, often allowing login simply by unlocking your device.

What is the best password manager in the UK?

All of the password manager's tested above were done so from the rainy climes of Great Britain. That means NordPass ranks as our favourite UK password manager for its ease of use, identity protection features and cross-platform compatibility.

Which password manager is the most secure?

Since cybersecurity is a moving target, the only way to truly test a password manager's resilience is through regular third-party audits. These should cover not just the organisation's data compliance and processes (EG SOC 2 Type 2), but also specific app and code audits by an external company. Since password managers make a virtue of passing these tests, they'll tend to announce when they've done so. Of course, any audit is a snapshot of a product's performance at one moment in time, and its results should be treated as such.

Which password manager has never been hacked?

As you can imagine, any large-scale password manager is likely to be a magnet for hackers. So although we've selected the services for their security above all else with no major breaches reported in recent memory, it's best to think of them as an exercise in risk mititgation rather than elimination. That said, NordPass, 1Passwords and many of the models featured, use a zero-knowledge encryption model, which means passwords are first encrypted on your device, before being uploaded to the cloud. All of which should do a lot to eliminate potential fallout in the event of a hacking.

NOW READ

The best VPNs for lightning-fast, encrypted globe-trotting

NordVPN will make you a master of digital disguise

The best free VPNs for easy, encrypted browsing