Password Managers Explained Like You're Hearing It for the First Time

A password manager is, at its simplest, a locked digital notebook that remembers your passwords so you don't have to. You create and remember exactly one strong master password. Everything else — your email password, your banking password, your Facebook password — gets stored inside, locked behind that one master password.

Why this is safer than what most people do now

Most people either reuse the same one or two passwords everywhere, or write them on paper near the computer. Reusing passwords means that if one website gets hacked, criminals can try that same password on your other accounts — and often succeed. A password manager lets every single account have its own long, complicated, unique password, without you ever having to remember or type most of them.

How it works day to day

When you visit a website you've saved, the password manager offers to fill in your username and password automatically, after you unlock it with your master password (or sometimes your fingerprint or face, on phones that support it). You're not typing passwords into websites anymore — you're approving the manager to do it for you.

What makes a good master password

• Longer is better than complicated — a memorable phrase of four or five random words is stronger than a short jumble of symbols.
• Don't reuse this one anywhere else, ever.
• Write it down once, somewhere physically secure (not on a sticky note on your monitor), in case you forget it.

Is it actually safe to put all my passwords in one place?

It feels counterintuitive, but yes — reputable password managers use strong encryption, meaning even the company that makes the software can't read your stored passwords. The real-world risk of reusing three passwords everywhere is far higher than the risk of using a well-reviewed password manager.