Setting up a password manager is the biggest security upgrade most people can make, and you can do it in an afternoon. This how-to is part of our password managers guide. Before starting, read how password managers work if you would like some background.
Step 1: Choose a manager
Do not overthink this. Our comparison gives a few strong options, and you can switch later. Download it from the maker's official website, not from a search ad.
Step 2: Create your master password
This is the one password you will need to remember. Follow our guide to choosing a master password: six or more random words, used nowhere else. Write it down and keep the paper somewhere private until you know it by heart, and then keep it for emergencies.
Step 3: Protect the vault
Before you add anything:
- Turn on two-factor login for the vault. An authenticator app is a good choice.
- Save the backup codes or emergency kit, on paper.
- Set up emergency access if your plan has it.
Step 4: Install it everywhere
Add the app to your phone and computer, and add the browser extension. Turn on autofill in your phone's settings, so it can offer your logins inside apps.
Step 5: Import what you already have
Most managers can import from your browser. Export your saved passwords, import the file, then delete that file straight away, because it contains your passwords in readable form. Then turn off your browser's offer to save passwords, so that you have one place for everything.
Step 6: Fix your most important accounts
Change these first, using the generator to create a unique password for each:
- Your main email account.
- Banking and payment apps.
- Your phone account, and Apple or Google account.
- Social media.
- Crypto exchanges, if you use them.
Our guide on which accounts need 2FA first uses the same order.
Step 7: Clean up over time
Most managers can flag weak and reused passwords. Each time you log in somewhere, take a moment to replace an old password with a generated one. Within a month or two, most of your accounts will be done.