Reused passwords are the biggest security risk most people have — and the easiest to fix in an afternoon. A password manager generates unique 20-character passwords for every site and fills them automatically across devices.
Choosing a manager
Bitwarden — free tier usable forever, open source, self-host option. 1Password — best family UX, travel mode, paid. Dashlane / NordPass — fine; watch renewal pricing. Apple Passwords / Google — OK in single ecosystem; painful crossing platforms.
Migration step by step
- Pick manager and create account with strong master password (passphrase — four random words).
- Enable 2FA on manager account itself — authenticator app, not SMS.
- Export CSV from Chrome/Edge/Firefox settings.
- Import CSV into manager; delete export file securely.
- Install browser extension and mobile app; enable biometric unlock.
- Disable browser "offer to save password" to avoid split brain.
- Change passwords starting with email, banking, Apple/Google/Microsoft, then work SSO.
Family and shared logins
Shared vault for Netflix, utilities, router admin — personal vaults for email and banking. Emergency access feature (Bitwarden, 1Password) lets trusted contact request vault access after waiting period — useful for partners.
Phishing still works
Managers fill credentials on fake sites if you visit them — always check URL before submitting. Use passkeys where offered (Google, Apple, Microsoft accounts) — phishing-resistant second layer.
