To take action : 15–30 min for setup · Depending on your devices and accounts
You're trying to remember all your passwords?
A vault to create and find unique passwords.
PatchYourself · Last editorial revision : · Sources
Fictional example: an everyday situation
Alex cannot remember which password belongs to which account. He installs a manager, prepares vault recovery and starts by saving his email sign-in. Other accounts can follow as he uses them.
The problem
Unique passwords are easier to maintain when a tool generates and stores them. A password manager does this in a protected vault. It can also fill credentials on the matching website, helping you notice some fake pages.
Choose an appropriate tool
Check supported devices, account recovery, any sharing needs and vault export. A built-in manager may be sufficient; a cross-platform manager can make mixed devices easier to use.
| Option | Check before choosing |
|---|---|
| Bitwarden | Free essential features; Premium listed at USD 19.80 per year at this revision, excluding any applicable taxes. |
| Built-in device or browser manager | Compatibility with other devices, export and recovery. |
| Another specialist manager | Current pricing, authentication, maintenance and recovery process. |
Open source makes independent examination easier, but does not itself guarantee there are no defects. Prices and features can change: check the provider before subscribing.
What to do now
Step 1: Install from the official source
Use the provider’s website or official app-store listing. Check the publisher and install only the extension you need.
Step 2: Protect the vault
If a master password is required, choose a long, unique passphrase made from randomly selected words. Prepare the provider’s recovery methods, then add extra sign-in protection.
Step 3: Start with one account
Save your email sign-in and replace its password if it was reused. Test filling it on the official website while keeping your existing session open. Work through other accounts at your own pace.
Step 4: Prepare a recoverable copy
Check how to export or recover the vault. Prefer an encrypted export where available and keep its key separately. A CSV export may contain every password in plain text: do not leave it in downloads or a shared folder.
Go further
What if the provider is breached?
The consequences depend on the vault design, exposed data and individual protections. An encrypted vault does not guarantee a universal cracking time. Follow provider advisories, protect the master password and prepare independent recovery.
The tool does not handle everything
Check the destination before filling a sign-in. An infected device can compromise a session even with a good manager. Updates and device locking still matter.
Sources and verification
References used for this revision. Menus and offers can change; consult the provider’s help for your version.