Password Manager: Create & Store Unique Passwords

This guide shows you how to use a password manager to generate strong, unique passwords for every account and store them securely. You’ll learn the exact steps to set up the tool, create your first vault, and replace weak reused passwords—so a single breach doesn’t put all your accounts at risk.

What You’ll Need

A password manager app. Popular options include Bitwarden, 1Password, Dashlane, and KeePassXC. Most have free tiers or trials.
A computer or mobile device where you’ll install the app or browser extension.
Your current email address (for account recovery).
Access to the accounts you want to update (you’ll need to log in to each one).

Step-by-Step

Choose and install a password manager. Pick one that suits your devices. Download the desktop app, mobile app, and browser extension from the official website or app store. Avoid third-party download sites.
Create your master password. This is the one password you must remember. Make it long (at least 12–16 characters) and unique—a passphrase like “correct-horse-battery-staple” works well. Do not reuse this anywhere else. Write it down on paper and store it in a safe place temporarily.
Set up two-factor authentication (2FA) on your password manager account. Use an authenticator app (like Google Authenticator or Authy) or a hardware key. This adds a second layer of protection even if your master password is compromised.
Install the browser extension. After logging in, your password manager will prompt you to install an extension for Chrome, Firefox, Edge, or Safari. This extension will auto-fill passwords and offer to save new ones.
Add your first account manually. Click the extension icon, select “Add Item” or “New Login,” and enter the website URL, username, and current password. Save it.
Use the built-in generator. When you create a new account online, click the password field. The manager will suggest a strong password—usually a random string of 16–20 characters with letters, numbers, and symbols. Accept it, and the manager saves it automatically.
Update an existing account’s password. Go to a site you use (like your email or social media), log in, and navigate to the security settings. Choose “Change Password.” When prompted for a new password, use the generator in your manager. The extension will offer to save the new password. Do this for your most important accounts first: email, banking, and social media.
Enable auto-fill. On your phone, enable the autofill service in your system settings (iOS: Settings > Passwords > AutoFill; Android: Settings > Autofill). This lets the manager fill in usernames and passwords in apps and browsers.
Use the security audit feature. Most managers have a “Security Dashboard” or “Password Health” report. Run it to see which of your passwords are weak, reused, or compromised. Prioritize updating those.
Sync and back up. Ensure your vault syncs across devices via your account. If you use a local-only manager like KeePassXC, back up the encrypted database file to a secure location (like an external drive).

Common Mistakes

Using a weak master password. If your master password is short or common, it defeats the purpose. Use a long passphrase and never share it.
Skipping 2FA. Without it, someone who guesses or steals your master password can access your entire vault.
Reusing passwords. The whole point is uniqueness. If you reuse a password even once, a breach on one site can compromise others.
Not updating old accounts. You might start using the manager for new accounts but leave old ones with weak passwords. Run the audit and fix them.
Storing the master password in the vault. That’s circular. Keep it only in your head or on paper in a secure location.
Ignoring the “password strength” meter. If the generator suggests a short password, increase the length. Aim for at least 16 characters.

Tips

Use a passphrase for your master password. Combine 4–5 random words with numbers and symbols. It’s easier to remember and harder to crack.
Let the manager generate passwords. Don’t try to invent your own—the built-in generator creates truly random ones.
Check for data breaches. Use tools like Have I Been Pwned (often integrated into managers) to see if your email or passwords have been exposed.
Set up emergency access. Some managers let you designate a trusted person who can request access to your vault in case you lose access. Use this for peace of mind.
Update your recovery email and phone number. Keep them current so you can regain access if needed.

Troubleshooting

Forgot your master password? Most managers offer account recovery via email or a recovery code. If you didn’t set that up, you may lose access to your vault. Some managers have a “recovery key” you can print and store. Always set this up.
Auto-fill isn’t working on a website. Right-click the username field and select the manager’s icon to manually fill. Or copy the password from the vault and paste it. If it still fails, check that the website URL matches the one saved in the item.
Browser extension not saving new logins. Make sure the extension is updated and you’re logged in. Sometimes you need to refresh the page after saving.
Vault won’t sync between devices. Check your internet connection and ensure you’re logged into the same account. For local managers, you may need to manually transfer the database file.
Password manager is slow. Close and reopen the app. Clear the browser cache if the extension lags.
You suspect your master password was compromised. Immediately change it. If you have 2FA enabled, that buys you time. Then change the passwords of your most critical accounts.

Frequently Asked Questions

Is it safe to store all my passwords in one place?

Yes, if you use a reputable manager with strong encryption (AES-256) and enable 2FA. The vault is encrypted locally, so even the service provider can’t read your passwords.

What if the password manager company gets hacked?

Your vault is encrypted with your master password, which the company doesn’t have. Even if they’re breached, attackers can’t decrypt your data without your master password.

Can I use a password manager on multiple devices?

Yes. Most managers sync your vault across all your devices via your account. You just log in with your master password on each one.

What if I forget my master password?

Most managers offer recovery options like a recovery code or trusted contacts. Without those, you’ll lose access to your vault. That’s why it’s crucial to set up recovery when you first install.

Do I need to change all my passwords immediately?

No. Start with your most important accounts (email, banking, social media) and work through the rest over time. The security audit feature helps prioritize.

Can I export my passwords if I want to switch managers?

Yes. Most managers allow you to export your vault as a CSV file. Then you can import it into another manager. Be sure to delete the CSV afterwards because it’s unencrypted.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →