Best Password Managers: Free and Paid

You’re probably wondering if password managers are really necessary. 

The short answer: Yes. 

The long answer: You may no longer be using the same easy-to-guess combo of your hometown and the year you graduated high school as a password for everything from your bank account to Neopets, but that doesn’t mean you have strong password game. 

It doesn’t matter if you’ve perfected your Sherlockian mind palace, you’ll never be able to beat a computer when it comes to remembering long, random strings of letters, numbers, and special characters — and long, random strings of letters, numbers, and special characters are what makes strong passwords. 

This doesn’t mean you should entrust your passwords to the first program that asks for it, however. Your browser’s built-in password manager, for example, probably isn’t particularly secure — especially if extra security steps, such as two-factor authentication (2FA) are opt-in — nor is it robust. Some built-in password managers, such as Apple’s iCloud Keychain, force you to use 2FA and are therefore more secure. But Keychain only works on select platforms — spoiler, mostly Apple. There is a Keychain extension for Windows, but it sends approximately 500 requests for 2FA per hour (I uninstalled it after a week). 

A third-party password manager solves all your problems. The best password managers are extremely secure, protecting your data via 256-bit AES end-to-end encryption, zero-knowledge technology, and both 2FA and multi-factor authentication. They have apps and extensions for all major platforms, mobile devices, and web browsers. They also do more than just save passwords; they’re packed with additional tools and features, including password generators, security audits, and secure cloud storage, that will take your security from “the 11-year-old across the street could hack you” to “not worth the effort.” 

So, which password manager should you be using? There’s no simple answer; it varies, based on your individual situation. After all, the biggest, and most unpredictable, variable in security is always you. 

Best Password Managers: Free and Paid

Picking the Best Password Manager For You 

• Cross-platform performance: It’s not difficult to find a password manager that works with your chosen platforms, as most support a surprisingly wide range of desktop and mobile operating systems and browsers. But the best password manager won’t just work on your platforms, it will work well. What works for you will depend on both the platforms you use and your personal tolerance for different quirks and inconveniences.
  
  
• Local or cloud-based storage: The best password managers store your passwords in one of two places: The cloud, aka remotely, on their own super-secure servers; or locally, on your own (super-secure?) server. Cloud-based storage is the best option for most people: It’s much more secure than anything you could hope to rig up, it’s backed up in the event something happens to your device, and you can conveniently sync your passwords across multiple platforms. There are local-storage-only services if you’re particularly paranoid and/or a security wizard. If you just want an offline backup of your passwords in addition to cloud-based convenience, many cloud-based password managers offer this as well.
  
  
• Industry-standard security protocols: The best password managers all follow the same industry-standard security protocols. This includes 256-bit AES encryption, end-to-end encryption, and zero-knowledge technology. This means all data is encrypted and decrypted locally, and can only be unlocked with your master password — which nobody,  not even the password manager, knows. You’ll also want to make sure your password manager protects logins via 2FA, multi-factor authentication, and/or biometric authentication; is active and up-to-date; and submits to regular third-party security audits.
  
  
• Password generator: The best password managers are proactive about password integrity, and include robust password generators that effortlessly create and save strong, unhackable passwords and passphrases. A good password generator has lots of options, and can create passwords that adhere to a variety of parameters — including your own, e.g., “easy to read.” It should also be easy to access (on all platforms) and work seamlessly with the rest of the service.
  
  
• Not just passwords: Password generators usually store other types of information in addition to passwords. This includes credit card numbers, bank info, shipping addresses, and a variety of other forms, documents, and IDs. Most of the best password managers have “secure notes” for storing strings of text, and many come with 1GB or more of secure cloud storage.
  
  
• Recovery options: Your master password is unknown and unrecoverable — but you might still be able to regain access to your account. There are a variety of recovery options — everything from SMS and biometric authentication to a designated emergency contact — depending on the service. Make sure the recovery options for your chosen password manager are options you can use — and set them up before you lose your master password.
  
  
• Extra features: Premium plans on the best password managers often include extra security tools and service, such as password auditing and breach/dark web monitoring. A password audit analyzes the credentials in your password vault and finds compromised, reused, and otherwise weak passwords, and directs you to change those passwords or update/delete the credentials. Some audits also check for expired passwords and websites with optional 2FA. Breach/dark web monitoring tracks data breaches and alerts you if it finds passwords or personal info.
  
  
• Price: Many of the best password managers have a free plan; most of these free plans are so strictly limited that they’re unusable for the average multi-device person. But you don’t have to pay — Bitwarden’s free plan has no limits on the number of passwords you can save or the number of devices you can sync across. Many password managers offer 14 - 30 day free trials of their premium services — it’s worth pointing out these trials are often automatically applied and you may not realize what you’ll no longer be able to access once the trial period is up. Family plans give premium service to five or six users and usually cost just a dollar or two more (per month) than an individual plan. All family members get individual secure password vaults (often with extended sharing options); family members can’t access each others’ data unless it’s explicitly shared. 

Other Password Managers We Tested

In our quest for the best password managers, we tested a number of other well-known services. Most of these were, in a word, passable, but not good enough to be listed among the best.

• RoboForm

While RoboForm works pretty smoothly on desktop, it is a little clunky on mobile — it still offers the same features and ultimately gets the job done, but to get the most out of the mobile experience, you'll want to switch to RoboForm's browser (though it's not required). That said, RoboForm’s plans are more affordable than most, with discounts if you purchase multiple years in advance. 

Read: RoboForm review 

• NordPass

NordPass offers a relatively usable free plan: You can store unlimited passwords and sync across unlimited devices, but you can only be logged into one device at a time. This means you’ll need to login every time you switch devices, but once you do you can access your vault from anywhere. But NordPass’s biggest drawback is its poor performance on mobile: It has trouble capturing credentials and filling out forms, which is…most of what password management is.

Read: NordPass review

• Dashlane

Dashlane is a well-known, secure password manager with free, paid, and family plans. The free plan limits users to 50 saved passwords on one device, while the paid individual and family plans offer unlimited syncing, secure notes, dark web monitoring, multi-factor authentication, 1GB of secure cloud storage, and Hotspot Shield’s VPN service. If you’re not swayed by the VPN service, Dashlane’s premium plans will seem pretty pricey: The premium plan for individuals costs $59.88 per year, while the family plan costs $89.88 per year (for up to six users).

Read: Dashlane review

• RememBear

RememBear is the most beginner-friendly password manager we’ve seen, with a simple, clean (and cute) interface; clear step-by-step instructions; and a much-needed injection of humor. RememBear is so beginner-friendly it might have been among the best password managers if not for this red flag: Its mobile apps haven’t been updated in over two years. An email to the company confirmed that the service is still in business, but the best password managers update regularly to stay ahead of new and developing security threats.

Read: RememBear review

Bottom Line

There’s a delicate balance between security and convenience. A password manager can be 100% locked down and secure, but if it’s difficult or frustrating to use, people will take shortcuts that compromise that otherwise perfect security. And that’s if they continue to use the service at all. That’s why it’s especially important to take your particular needs — the platforms and devices you use, the types of credentials you need to store, the extra tools you find most useful — into account when choosing the best password manager for you.