If you’ve read our guides on phone scams and removing your information from people-search sites, there’s a third piece that ties them together: most online accounts are still protected by passwords that are either reused across multiple sites, too simple to resist a determined attacker, or both. A password manager fixes this in a way that’s actually easier than what most people are doing now — not harder.
This guide walks through the entire setup from scratch: choosing one, creating your vault, installing it on your devices, and getting your first few passwords into it. Expect to spend about thirty to forty-five minutes the first time, and almost no time after that.
Why this is worth doing
The average person now manages somewhere north of 100 online accounts — email, banking, shopping, healthcare portals, streaming services. Remembering a unique, strong password for each one isn’t realistic for anybody, which is exactly why so many people end up reusing the same password everywhere or writing them down somewhere unsafe.
A password manager solves this with one idea: you remember exactly one password — your “master password” — and the manager remembers everything else. It generates strong, random passwords for each site, stores them in an encrypted vault, and fills them in automatically when you visit a login page. You’re not memorizing anything new; you’re memorizing less than you do today.
Choosing one
There are several good options, and for most people the differences come down to price and how the interface feels rather than security — all of the major password managers use strong, modern encryption. Two reasonable starting points:
NordPass has a genuinely usable free tier (unlimited password storage, autofill, and a password generator, though it limits you to one device at a time on the free plan), and its Premium tier costs around $1.50–$3/month depending on the plan length. It’s a sensible choice if you want to try a password manager without committing to anything.
1Password doesn’t offer a free plan but does have a 14-day free trial, and its $2.40/month Individual plan includes a large-text display mode that’s genuinely helpful if small text and busy interfaces are frustrating — worth knowing about specifically because most reviews don’t mention it.
Either is a fine choice. The rest of this guide uses NordPass as the example since it’s free to start, but the steps are nearly identical for any password manager you choose.
Step 1: Create your account
Go to the password manager’s official website directly (don’t follow a link from an email or search ad — type the address yourself) and choose to create a free account. You’ll be asked for an email address, which will become how you log in.
Step 2: Create your master password
This is the only password you’ll ever need to remember again, so it’s worth taking a moment with this step. A few principles:
- Longer beats more complicated. A passphrase of four or five unrelated words — something like “purple-garden-bicycle-window” — is both easier to remember and harder to crack than a short password full of symbols.
- Don’t reuse a password you’ve used anywhere else. This is the one password where reuse genuinely defeats the entire purpose.
- Write it down somewhere physical and secure — like a sealed envelope in a locked drawer — as a backup in case you forget it. This is the one password worth keeping a written copy of, precisely because there’s no “forgot password” option for the vault itself; if you lose it and have no backup, you lose access to everything stored inside.
Most password managers require a minimum length and at least one special character. Once you’ve entered it, you’ll typically be asked to confirm it once more — take this seriously, since a small typo here is the single most common mistake during setup.
Step 3: Install it everywhere you’ll use it
A password manager is only useful if it’s available wherever you log into things. That generally means:
- The desktop app on your computer
- The browser extension for whichever browser you use most (Chrome, Safari, Edge, or Firefox)
- The mobile app on your phone and tablet
Install the desktop app or browser extension first, sign in with the account you just created, and you’re already functional. Add the mobile app when convenient — it’s helpful but not urgent for your first session.
Step 4: Add your first few passwords
You don’t need to move everything over on day one. Two ways to get started:
The easy way — let it happen naturally. Once the browser extension is installed, simply log into a few sites you use regularly: your email, your bank, your most-used shopping site. The extension will pop up and offer to save the login. Click “save,” and that account is now in your vault. Do this for your handful of most important accounts over the next few days and you’ll have covered the ones that matter most without any dedicated effort.
The thorough way — import everything at once. If your browser has been saving your passwords already (most have, by default), most password managers let you import that entire list in one step, usually under Settings → Import. This brings everything over at once, though it also means weak or reused passwords come along with it — which leads to the next step.
Step 5: Strengthen the passwords that matter most
Once you have accounts in your vault, most password managers include a password health check that flags weak, reused, or old passwords. You don’t need to fix everything immediately. Start with the accounts that would cause the most damage if compromised — email, banking, and anywhere your payment information is stored — and use the built-in password generator to create a new, unique password for each. The manager will save the new one automatically.
A few things that make this easier going forward
Turn on biometric unlock if your device supports fingerprint or face recognition. This lets you unlock your vault quickly without typing your master password every time, while keeping the same level of security.
Enable two-factor authentication on your password manager account itself, if it offers this. This adds a second check beyond the master password, so even if someone discovered your master password, they couldn’t get into your vault without also having access to your phone.
Don’t try to convert everything in one sitting. The whole point of this tool is that it works gradually, account by account, as you naturally log into things over the coming weeks. There’s no deadline.
What this protects you against
Going back to where this series started: a password manager directly closes one of the more common paths scammers and hackers use. Reused passwords mean that a single data breach at one company — something entirely outside your control — can expose your accounts everywhere else you used that same password. A password manager makes every account independent, so one breach stays contained to one account.
It’s a genuinely small amount of setup time for a meaningful, lasting improvement to your security — and unlike a lot of advice in this space, it’s something you do once and then barely think about again.
Next in this series: a closer look at public wifi safety while traveling, and when a VPN is actually worth using.