What is Password Manager?
Software that securely stores and manages passwords and other credentials. Password managers generate strong, unique passwords for each account and encrypt them with a single master password, eliminating password reuse and the need to remember multiple complex passwords.
Also known as: Password Vault, Credential Manager
A password manager is one of the most impactful privacy tools you can use. It eliminates the main causes of account compromise: weak passwords and password reuse.
The Problem They Solve
The average person has 100+ online accounts. Without a password manager:
- You reuse passwords (one breach = all accounts compromised)
- You use weak passwords (easier to remember = easier to crack)
- You forget passwords (leading to resets and frustration)
How They Work
- Master password: One strong password you remember
- Encrypted vault: All credentials stored encrypted
- Autofill: Passwords filled automatically in browsers/apps
- Generation: Creates strong, random passwords
Types of Password Managers
Cloud-Based
- Pros: Sync across devices, easy setup
- Cons: Trust provider with encrypted data
- Examples: Bitwarden, 1Password
Self-Hosted
- Pros: Full control, no third-party trust
- Cons: Technical setup, you handle backups
- Examples: Bitwarden (self-hosted), Vaultwarden
Local-Only
- Pros: Data never leaves your device
- Cons: No sync, manual backups critical
- Examples: KeePassXC
Privacy Considerations
Look for:
- Zero-knowledge architecture: Provider can't decrypt your data
- Open source: Verifiable security claims
- End-to-end encryption: Even with cloud sync
- Security audits: Independent verification
- Local encryption: Decryption happens on your device
Best Practices
- Use a strong, unique master password (passphrase recommended)
- Enable 2FA on your password manager
- Generate unique passwords for every account (20+ characters)
- Regular backups of your vault
- Review and remove unused accounts periodically
Related Terms
Encryption
The process of converting information into a code to prevent unauthorized access. Encryption transforms readable data (plaintext) into an unreadable format (ciphertext) using a cryptographic algorithm and key. Only those with the correct key can decrypt and read the original data.
Two-Factor Authentication
A security method requiring two different types of identification to access an account: something you know (password) plus something you have (phone, hardware key) or something you are (biometric). This significantly reduces the risk of unauthorized access even if your password is compromised.
Zero-Knowledge Proof
A cryptographic method by which one party can prove to another party that they know a value, without conveying any information apart from the fact that they know the value. This allows authentication and verification without exposing sensitive data.
Related Tools
Have more questions?
Use our guided flow to get the right next privacy step for Password Manager.
Open Guided Flow