Home / Guides

Password managers: how they work and why they are safe

By the FreeAllTool team · Updated October 28, 2026

Security advice says to use a long, unique password for every account. Most people have dozens of accounts, so following that advice by memory is close to impossible. A password manager solves the problem by remembering every password for you.

What a password manager does

It is an app or browser feature that stores your usernames and passwords in an encrypted vault. When you visit a login page, it fills in your details automatically. When you create a new account, it can generate a strong random password and save it in one step.

How your passwords stay protected

The vault is locked with one master password, or with your device’s fingerprint or face unlock. Reputable managers encrypt the vault on your own device before syncing it, so even the company running the service cannot read your passwords. Without your master password, the stored data is unreadable.

Is it safe to put everything in one place?

It is a fair question. The alternative most people use, reusing a few easy passwords, is much riskier. When one website leaks a reused password, criminals try it everywhere else. With a manager, each account has its own password, so a leak at one site affects only that site.

The key is protecting the vault itself: choose a long master password you have never used anywhere else, and turn on two-step verification for the password manager account.

Types of password managers

  • Built into your phone or browser. Apple, Google and Microsoft all include password managers. They are free and convenient if you mainly use one ecosystem.
  • Standalone apps. Dedicated managers work across different devices and browsers and often add features such as secure notes and sharing with family.

Getting started

  1. Pick a manager and create a strong master passphrase of four or more random words.
  2. Turn on two-step verification for it.
  3. Let it save passwords as you log in to sites over the next few weeks.
  4. Start with your most important accounts and change any reused passwords to new random ones using our password generator.

After a short adjustment period, most people find logging in faster than before, because they no longer type passwords at all.

Related guides