Quick answer
A password manager stores all passwords in an encrypted database that you unlock with a single master password. Set it up by downloading the program from the official website, creating a strong master password, enabling two-factor authentication, and regularly backing up the database. Never store the master password in the manager itself or share it via email or messages.
How to recognize the problem
- You use the same password on multiple sites or constantly forget it
- You write passwords in note-taking apps, on paper, or in a spreadsheet on your computer
- You don't know which accounts you've created and where your logins are
- You want to change passwords after a security incident but don't know which sites you have accounts on
- You share passwords with colleagues via messages or email
Most common causes
Too many accounts to remember
The average user has dozens of accounts, making it impossible to remember unique and strong passwords without help.
Insecure password storage
Passwords in text files, note-taking apps, or on paper easily fall into the wrong hands, especially on shared computers.
Password reuse
When the same password is used in multiple places, one breach on any site compromises all other accounts.
Phishing and fake login pages
Manually typing a password on a fake page reveals it to the attacker, while a password manager can only fill it on the exact domain.
Step-by-step fix
- 1
Choose a password manager from the official website
Opt for a well-known program that has versions for Windows, macOS, Android, and iOS, as well as an extension for Chrome or Edge. Download it only from the manufacturer's official website, not from sites offering "free" installations. Check that it offers database encryption, autofill, and backup export.
- 2
Create a strong master password
The master password must be long (at least 12, preferably 16 characters) and unique, and must not be used anywhere else. It's best to be a longer sentence that you can easily remember but others cannot easily guess. Write it down on paper and keep it in a safe place outside the computer, as it is the only key to all other passwords.
- 3
Enable two-factor authentication
In the password manager account settings, find the two-factor authentication (2FA) option and enable it. Use an authenticator app or a security key rather than SMS messages when possible. This way, even if someone learns the master password, it is much harder for them to access the database.
- 4
Set up automatic lock
In the program settings, find the auto-lock option and set it to a short time, for example 1 to 5 minutes of inactivity. Also enable locking when you lock your computer or close the browser. On your phone, enable biometric unlock or a PIN as an additional layer of protection.
- 5
Import existing passwords or add them manually
If you have been storing passwords in your browser, look for an option in the manager to import from a CSV file that you previously exported from the browser. The CSV file contains passwords in readable form, so keep it only during the import and delete it from your computer immediately, emptying the recycle bin. If you don't have an export, start manually: log in to each important site and save a new, unique password generated by the manager.
- 6
Change passwords on the most important accounts
Start with email, banking accounts, social networks, and business services. For each account, use the password generation option within the manager and save it. If a site does not yet support autofill, you can copy the password from the manager and paste it manually.
- 7
Back up the database
In the settings, find the export or backup option and save the backup to a safe place, for example an external disk that is not permanently connected. If the program offers encrypted export, use it; if not, protect the exported copy and keep it as a confidential file. Write down the master password and keep it separate from the backup. Regularly, for example once a month, update the backup.
- 8
Use the manager daily and securely
When logging in to a site, let the manager fill in the password, but check that the domain is correct. Do not share passwords via email or messages; if sharing is necessary, use the sharing function within the manager if available. Regularly review the list of saved passwords and remove entries for accounts you no longer use.
If something doesn't work or you want more advanced protection
If you forget the master password, most managers cannot recover it, so the only solution is to create a new database and start over or restore a backup if you have one. That's why a paper copy of the master password and a secure backup in a separate place are essential. If you use a manager at work, check whether it is allowed and whether there is centralized access management. For additional protection, enable passwordless login (passkey) where supported and regularly check whether your passwords have appeared in known data breaches. Avoid sharing the master password with colleagues; for shared accounts, use dedicated features or an organizational password manager.
How to prevent it
- Never use the same password on multiple sites; let the manager generate unique passwords.
- Enable 2FA on the password manager account and on all important services.
- Regularly back up the database, preferably encrypted, and keep it separate from the computer.
- Do not share the master password and do not enter it on sites that ask for it outside the manager.
When to call a professional
If you manage passwords for multiple employees, have shared business accounts, or are unsure how to securely migrate passwords from a browser, contact IT support. They can set up centralized access management and check whether existing passwords have been compromised.
IT infrastructure maintenance · Servers, networks, backup, security and helpdeskFAQ
Is it safe to store all passwords in a password manager?
Yes, if you use a well-known program with a strong master password and two-factor authentication enabled. The database is encrypted, so the risk is lower than when you reuse the same passwords or write them down in easily accessible places.
What if I forget the master password?
Most managers cannot recover the master password, as that would mean the manufacturer has access to your data. If you have a backup and a written master password, you can restore the database; otherwise, you are left to create a new database and save the passwords again.
Can I use a password manager on multiple devices?
Yes, most managers offer synchronization between computers and phones through an encrypted database. Enable it only if you trust the manufacturer and use a strong master password and 2FA; otherwise, you can manually transfer a secure backup.