Quick picks
- Best overall: 1Password — polished apps, a strong security design and excellent family sharing.
- Best free option: Bitwarden — open source, audited, and unlimited passwords on unlimited devices at no cost.
- Best for privacy: Proton Pass — fully encrypted vault with built-in hide-my-email aliases.
- Best for breach monitoring: Dashlane — dark web alerts and a clear password health score.
- Best for business controls: Keeper — mature admin tools and recognized security certifications.
- Best for beginners: NordPass — clean, simple interface with a usable free plan.
How we chose
- Security design: zero-knowledge, end-to-end encryption so the provider cannot read your vault.
- Independent security audits and a transparent track record, including how the company has handled past incidents.
- Passkey support and strong two-factor options for protecting the vault itself.
- App and autofill quality across Windows, macOS, iPhone, Android and major browsers.
- Sharing and family features, including private vaults, shared vaults and account recovery options.
- Pricing model, free-plan limits, and how easily you can import from and export to other managers.
Advertisement
1. Best overall for most people and families
1Password
1Password pairs a strong security design with some of the most polished apps available. Your vault is end-to-end encrypted and protected by both your account password and a Secret Key generated on your device, so stolen server data is far harder to crack. Watchtower flags weak, reused and breached passwords, and the apps handle passkeys, two-factor codes and autofill smoothly on Windows, Mac, iPhone, Android, Linux and major browsers. The Families plan gives each person a private vault alongside shared vaults, and family organizers can help members recover access.
Pros
- Secret Key adds protection beyond the account password
- Polished apps and reliable autofill
- Watchtower breach and weak-password alerts
- Family sharing with organizer-assisted recovery
Cons
- No free plan, only a free trial
- Current versions are subscription only
Pricing: Subscription plans for individuals, families and businesses after a free trial; check the official site for current pricing.
Try 1Password2. Best free password manager
Bitwarden
Bitwarden is open source, publishes its independent security audits, and its free plan includes unlimited passwords synced across unlimited devices, which few competitors match. It supports passkeys, password and username generation, secure notes, and Bitwarden Send for sharing text or files with an expiry date. The low-cost Premium plan adds built-in authenticator codes, encrypted file attachments, emergency access and vault health reports, and the Families plan covers a household. Technical users can even self-host. Expect a more utilitarian interface and autofill that sometimes needs an extra click.
Pros
- Generous free plan on unlimited devices
- Open source with regular third-party audits
- Inexpensive Premium and Families upgrades
- Self-hosting option for advanced users
Cons
- Apps feel less refined than 1Password
- Authenticator codes and emergency access need Premium
Pricing: Free plan with no device limit; optional low-cost Premium, Families and business subscriptions.
Try Bitwarden3. Best for privacy and email aliases
Proton Pass
Proton Pass comes from the Swiss company behind Proton Mail and Proton VPN. Its apps are open source, it has published an independent security audit, and it encrypts every vault field end to end, including usernames and web addresses. The standout feature is hide-my-email aliases, which let you sign up for sites without revealing your real address. The free plan covers unlimited logins, devices and passkeys with a limited number of aliases; paid plans add more aliases, built-in two-factor codes, extra vaults and sharing, plus bundles with other Proton services.
Pros
- Strong free plan with passkeys
- Built-in hide-my-email aliases
- Open-source apps with a published audit
- Bundles with Proton Mail, VPN and Drive
Cons
- Younger product with fewer advanced options
- Free plan limits aliases, vaults and 2FA codes
Pricing: Free plan plus individual, family and Proton bundle subscriptions; check current plan limits.
Try Proton Pass4. Best for built-in breach monitoring
Dashlane
Dashlane is a mature, zero-knowledge password manager known for smooth autofill, early passkey support and built-in dark web monitoring that alerts you when your details appear in a breach. Its password health score makes it easy to see which logins to fix first. Dashlane runs through browser extensions and mobile apps rather than traditional desktop programs, which suits people who do most things in the browser. It ended its free plan in 2025, so it is now a paid-only choice, usually priced above Bitwarden and Proton Pass. Family and business plans are available.
Pros
- Dark web monitoring built in
- Smooth autofill and early passkey support
- Clear password health dashboard
Cons
- No free plan
- Priced above most rivals
- No traditional desktop apps
Pricing: Paid subscriptions only for individuals, families and businesses; check the official site for current pricing.
Visit Dashlane5. Best for businesses and strict security requirements
Keeper
Keeper is a long-established, zero-knowledge password manager with a strong following among businesses and public-sector organizations. It holds recognized security certifications such as SOC 2 and ISO 27001, and its admin console offers detailed policies, role-based permissions and reporting. For individuals and families, the apps are fast and support passkeys, two-factor codes and encrypted file storage. Some extras, such as dark web breach monitoring or additional storage, may be sold as add-ons depending on the plan, so compare bundles carefully. Treat Keeper as a paid product; its free option is very limited.
Pros
- Mature business admin and compliance features
- Recognized security certifications
- Fast apps with passkey support
- Encrypted file storage options
Cons
- Add-ons can make the total cost less clear
- Free option is too limited for most people
Pricing: Subscription plans for individuals, families and businesses, with optional paid add-ons and a very limited free option.
Visit Keeper6. Best for simple, beginner-friendly use
NordPass
NordPass, from the company behind NordVPN, focuses on a clean, uncluttered experience that suits people new to password managers. It uses the modern XChaCha20 encryption algorithm with a zero-knowledge design, has undergone independent security audits, and supports passkeys. The free plan stores unlimited passwords, but only one device can be signed in at a time, which gets awkward if you switch between phone and PC. Premium removes that limit and adds sharing, password health reports and data breach scanning. Family and business plans are available, often in Nord Security bundles.
Pros
- Very easy to set up and use
- Modern encryption and passkey support
- Usable free plan for one device at a time
Cons
- Free plan allows only one active session at a time
- Fewer advanced features than 1Password or Bitwarden
Pricing: Free plan limited to one active session; Premium, Family and business subscriptions with introductory pricing that may renew higher.
Try NordPassBuying guide
What zero-knowledge encryption actually protects
Every manager on this list uses zero-knowledge, end-to-end encryption. Your vault is encrypted on your device with a key derived from your master password, and the company stores only scrambled data it cannot read. That design is why a provider breach is survivable, but it is not magic. If attackers steal encrypted vaults, as happened to LastPass in 2022, they can try to guess master passwords offline, so a long, unique passphrase and strong key-derivation settings are essential. Also check what is encrypted: some services have historically left metadata such as website addresses in plain text. The flip side of zero-knowledge is that the company cannot reset a forgotten master password, so set up any recovery option offered.
Audits, track record and transparency
Security claims are easy to make, so look for evidence. The stronger providers hire outside firms to test their apps and infrastructure and publish the results or summaries, run public bug bounty programs, and hold certifications such as SOC 2 where they serve businesses. Open-source apps, as with Bitwarden and Proton Pass, let independent researchers inspect the code directly. Just as important is how a company behaves when something goes wrong: quick, complete disclosure is a good sign, while drip-fed updates are a warning. A clean history is not a guarantee, but a vendor that is open about audits and incidents is easier to trust with every login you own.
Passkeys and two-factor protection
Passkeys replace passwords with a cryptographic key pair: the private key stays in your password manager or device, and the website only holds a public key, so there is nothing reusable to steal and phishing pages cannot capture it. All the managers here can store and sync passkeys, which is handy if you use a mix of Windows, Android and Apple devices. Protect the vault itself with two-factor authentication using an authenticator app or a hardware security key. Many managers can also generate two-factor codes for your other accounts. That is convenient, but keeping codes for your most critical accounts in a separate authenticator app adds a layer of separation.
When Apple, Google or Edge's built-in manager is enough
Built-in managers are free and far better than reusing passwords. Apple Passwords syncs through iCloud Keychain with end-to-end encryption, supports passkeys and verification codes, lets you share groups of passwords with family, and works on Windows through iCloud for Windows. Google Password Manager lives in Chrome and Android, runs Password Checkup and supports passkeys. Microsoft Edge's password manager can scan for leaked passwords. If everyone in your home uses the same ecosystem and one browser, these may be all you need. A dedicated manager earns its place when you mix platforms and browsers, want to store documents and secure notes, need emergency access for a trusted person, or want polished family sharing.
Family plans, sharing and switching managers
Family plans typically give each person a private vault plus shared vaults or collections for things like streaming logins, Wi-Fi passwords and bank details. Look for an organizer role that can help a family member regain access, since forgotten master passwords are the most common household problem. Before committing, check the migration path in both directions. Most managers import CSV files from browsers and rivals, and some import directly from another manager's account. Exported CSV files are unencrypted, so delete them as soon as the import is done. Also confirm that you can export everything later, including notes and attachments, so switching again is painless if prices or policies change.
Advertisement
FAQ
Are password managers safe if the company gets hacked?
Reputable managers encrypt your vault on your device before it is uploaded, so a breach at the company exposes encrypted data rather than readable passwords. The LastPass incident showed the limits: attackers who steal vaults can try to guess master passwords offline. A long, unique master password and two-factor authentication keep your vault safe even in that scenario, which is why they matter more than any feature list.
What is the best free password manager?
Bitwarden is the best free password manager for most people. Its free plan stores unlimited passwords and syncs them across unlimited devices, supports passkeys, and comes from an open-source, independently audited codebase. Proton Pass is a close second with a strong free plan and email aliases. If you only use Apple devices or only use Chrome, the built-in Apple or Google managers are also free and capable.
Is Apple Passwords or Google Password Manager good enough?
For many people, yes. Apple Passwords and Google Password Manager encrypt your data, support passkeys, warn about breached passwords and sync across that company's devices. They fall short when you mix ecosystems, share with family members on different platforms, want secure notes and documents, or need emergency access. If any of those apply, a dedicated manager such as 1Password or Bitwarden is the better long-term choice.
Do password managers support passkeys?
Yes. 1Password, Bitwarden, Proton Pass, Dashlane, Keeper and NordPass can all save passkeys and use them to sign in, and they sync them across your devices. Apple, Google and Microsoft also store passkeys in their built-in managers. The advantage of a third-party manager is that the same passkey works across Windows, Android and Apple devices without being tied to one company's ecosystem.
What happens if I forget my master password?
Because of zero-knowledge encryption, the provider cannot simply reset your master password. Most managers offer some form of backup: 1Password uses an Emergency Kit and lets family organizers help recover members, while Bitwarden offers emergency access on paid plans and account recovery in business setups. Set these up on day one, store your recovery details somewhere safe offline, and consider a memorable passphrase of several random words.
Can I move my passwords from one manager to another?
Yes. Nearly every manager can import a CSV file exported from another manager or browser, and some import directly from rival accounts. Export from the old service, import into the new one, check that logins, notes and cards came across, then permanently delete the CSV because it is not encrypted. File attachments and passkeys often do not transfer through CSV, so move those manually.
Related guides
1Password vs Bitwarden
How the top paid pick compares with the top free pick on security, apps and price.
Best LastPass alternatives
Where to move after the LastPass breach and how to migrate safely.
Check if your password was leaked
Free ways to find out whether your passwords have appeared in a data breach.
Recover a hacked email account
What to do right now if someone has taken over your email account.
Best antivirus for Windows 11
Password managers work best alongside solid malware protection on your PC.