Mediaboss Marketing

You need a password manager. Data breaches are now commonplace, and that flood of stolen data has made cracking passwords even easierand not just the password12345 variety, but also those that use strategies like variations on a single password or substituting numbers for letters. Even if youre using unique, random passwords, storing them in a document or spreadsheet leaves you vulnerable to prying eyes.

While paid password managers offer nice extras, even a free password manager protects you from the risks of using weak passwords (or worse, using the same one everywhere). You just have to remember one password to access a single, secure place where all your other passwords are stored.

Free password managers come in different flavors and styles, too, so you should be able to find one that fits your lifestyle. Down the road, you can always upgrade to a paid service as your needs grow.

Not sure what features youll need? Generally, you want a service that offers password generation, autoform filling, two-factor authentication, and allows you to move between different devices -and- device types. For more info, you can read our explanation of what you need to know about password managers.

Like several other services, Bitwarden offers a free tier and a paid tierbut its free tier packs in so many features that most individuals wont need more. You can access the service across an unlimited amount of devices and a multitude of device types, enable basic TOTP two-factor authentication, and fill your vault with as many passwords as youd like. The free personal plan also allows privacy-minded users to avoid the companys cloud hosting and instead self-host.

Rivals dole out far less to their free users, and its particularly rare for them to grant unrestricted movement between multiple device types. (Dashlane even begins charging as soon as you want to leave the confines of a single device.) Most competitors are also not open-source like Bitwarden, which prevents their communities from being able to hunt for hidden backdoors or security holes.

The one thing that the free personal plan doesnt offer is password sharingbut you can partially get around that by signing up for a free enterprise plan instead. It includes two seats with unlimited password sharing between them, thus allowing both individuals to safely access passwords for shared accounts. The trade-off, however, is that free enterprise plans do not allow self-hosting.

Bitwardens generous lineup of features for its free service makes it our top pick. Choose the free enterprise plan to enable password sharing with one other account.

Bitwardens other advantage is that should your needs expand down the road, the transition to a paid plan wont cost much. A premium personal plan is just $10 per year (compared to $36+ per year for rivals), and a family plan is $40 per year for up to six users (compared to $48+ per year for rivals). And moving up to a paid tier does come with concrete benefits: support for more sophisticated forms of two-factor authentication, evaluations of your passwords health (e.g., strength, public exposure, etc), encrypted file storage, and emergency access for trusted individuals.

Finally, if you decide to move elsewhere one day, Bitwarden allows you to export your passwordswith the option to do so as an encrypted file. But with such a generous and thorough set of features, youll likely not want to go elsewhere.

KeePass may not look like much, but under the hood this desktop-application-based password manager has all the features you could want, particularly if youre privacy and security minded.

Because the program and its encrypted database file(s) are stored locally on your computer by default, you retain full control over who could access itunlike a cloud service, where you have to trust that servers are set up correctly and that the employees are trustworthy. Moreover, you dont even have to install it on your system, but run it via a portable .exe application kept on a USB stick.

KeePass is also an open-source program, which means that the community can always vet it for any hidden backdoors or just plain old security-crippling bugs. And you can enable two-factor authentication through the use of key files (which augments your master password), plus lock the database file to the Windows account that created it, too.

KeePasss numerous plugins let you approximate much of the premium features youd get with a paid service, so long as youre willing to put in some elbow grease. This is only part of the full list!

Youre not just locked to a Windows desktop system, eitherbecause the program is open source, you can find community-created ports of KeePass for MacOS, Android, and iOS, as well as a boatload of plugins that let you customize it to your taste. With plugins, you can re-create most of the features youd find in paid cloud-based services, like checking to see if any of your passwords have been found as part of a data dump.

You can also get creative with how you store your database filefor remote access, you can put it on a home server, or if youre comfortable, a cloud service of your own choosing. (Perhaps youre more comfortable with how Google safeguards its accounts than a dedicated password manager service, for example.) And should you ever decide to hang up your hat as a DIY password manager administrator, KeePass allows for easy exports of your passwords.

Password managers within mobile operating systems and major browsers have come a long way. Just a few years ago, we wouldnt have advised using them at all, but now theyve shored up their security and features to become a viable (though basic) option.

But basic isnt badwhen it comes to password managers, the best service is the one that youll use. For some people, using a dedicated password manager can be too much to keep track of. In those cases, leaning on Google, Apple, or even Firefox can help upgrade your password security with little extra effort necessary. Their built-in password management tools can do the heavy lifting of creating and remembering unique random passwords across the web, and you wont need to switch to a different app to make it work.

If youre going to choose a browser-based password manager, Firefox is one of the best options among the bunch.

Of course, you will lock yourself into those ecosystems by doing so, but if you live your whole life within those waters already, you wont be bothered by that fact. Google probably will appeal to most people, as Chrome is ubiquitous, but those who worry about data privacy can instead turn to Firefox and its pledge to not sell your data. Apple also shares Firefoxs commitment to privacy, but theyre the hardest to leave, as the company doesnt provide an easy method to export passwords. We advise choosing Google or Firefox for the widest reach across devices, and Apple if you own both MacOS and iOS devices (and dont plan to leave).

Committing to Apple and iCloud Keychain? Follow these tips on how to set it up and make the most of it.

The one primary downside to using your Google, Apple, or Firefox account to store passwords is that theyre not as tightly safeguarded as with a third-party service. Even if you secure your account with two-factor authentication (and you absolutely should if youre storing passwords in it!), Google, Apple, or Firefox tend to be more lax about accessing passwords from a device thats logged in. Often they dont ask for reauthentication to use a stored password, unlike most dedicated password managersand that can be a security hazard on a shared device.

Why bother with a paid password manager if you can use a free one? Paid services provide premium features that enable more control over your passwords and how you secure them. For example, youll often gain access to password sharing (handy if your household members all need to know the Netflix password), support for YubiKey and other more advanced forms of 2FA authenticators, and alerts that tell you if your password turned up in a data dump. Some paid services even have a signature feature that makes them stand out from competitorsfor example, 1Password has a travel vault feature that hides some passwords when youre traveling, as an extra security measure when you might encounter aggressive airport screening or simply lose access to your devices due to theft or lost baggage.

If you need these kinds of features, check out our list of the best paid password managers to see which ones offer the best bang for your buck.

More here:
Best free password managers: Better online security doesnt have to cost a thing - PCWorld