Passwords that work · Lesson 3 of 11

What Is a Password Manager? One Password for Every Account

Learn what a password manager does, why it should create your passwords, which few you still memorize, and whether you already have one.

FREE LESSON
Cover picture for lesson 3: What Is a Password Manager? One Password for Every AccountVideo coming soon
The video is not out yet. The written lesson below has the same content.
THE WRITTEN LESSONFollow along at your pace

In this lesson, you will see how a password manager remembers your passwords for you. That way, every account can have its own password without you having to remember dozens of them. And you may already have one on your phone or computer.

What a password manager is

A password manager is an app that creates, stores and fills in a different strong password for every account. It keeps them in a locked vault, a bit like a safe. When you sign in to a website, it fills in the right password for that site, so you don’t have to type it.

For example, when you open your email’s sign-in page, the manager offers your saved email password. You approve it, and the password box fills itself in.

A card headed Password manager, An app for your passwords, with three labels: Creates, Stores and Fills in. A dashed line runs from a safe to a Sign in page, where the password box is filled in and a blue tick shows it worked.(opens the full-size picture)
Three jobs in one app: it creates, stores and fills in your passwords.

One password for every account

Nobody can remember a different strong password for dozens of accounts. A manager can, so each account gets its own. Then, if one website leaks your password, the problem stays at that one site. Your email, your bank and everything else keep their own, different passwords.

This is the habit from the lesson on passwords you can remember, made practical: one password per account, without the memory work.

A safe beside eight account cards, each with its own differently shaped key and a lock: Email, Bank, Shopping, Social, Photos, Streaming, Work and Old website. The Old website card is cracked in red. A pill says The problem stays at one site.(opens the full-size picture)
Each account has its own key, so one leak stays at one site.

Let it create your passwords

A password manager helps most when it creates your passwords, not only when it stores them. If you only save your old passwords in it, every reused password comes along too, and so does the weakness.

So let the manager make a new, random password when you sign up for something or change a password. The random passwords it creates are stronger than any you would make up, and you never need to remember them.

A New password card with a long hidden password and a Create password button, labelled Made by the manager. Beside it, three keys of different shapes go into an open safe, and a pill says Stronger than any you would make up.(opens the full-size picture)
A password the manager makes is stronger than one you make up.

Start with your email

Once your manager is set up, change your email password first, to a new one the manager creates. Then replace the others as you sign in to each site over the following weeks.

Is it safe to keep them all in one place?

It is a fair question. A good manager keeps your passwords encrypted, which means scrambled, and only you hold the key. Britain’s National Cyber Security Centre says that, used correctly, a password manager protects you far better than memory, sticky notes or reused passwords.

“Used correctly” mostly means two things: a strong password for the manager itself, used nowhere else, and a second lock on the manager account, which a later lesson covers.

A question card, All in one place? Under it, the line Used correctly, far better than memory, sticky notes or reuse, credited to Britain's National Cyber Security Centre. A safe with a blue tick sits beside three faded cards: Memory, Sticky notes and Reused passwords.(opens the full-size picture)
One well-locked safe beats memory, sticky notes or reuse.

The few passwords you still memorize

Which passwords do you still memorize? Just a few. The manager’s own password, which is the key to everything inside. And your device login, like the password that unlocks your computer, because you type it before the manager can help.

Make those from three random words, and use them nowhere else.

A heading, Just a few, and two cards: The manager's own password, with a key, and Your device login, with a locked laptop. A dashed line links them to a safe, and a pill says Three random words, used nowhere else.(opens the full-size picture)
Only two passwords stay in your head.

You may already have one

Your phone or web browser, the app you use to visit websites, may already have a password manager built in. If all your devices come from one maker, that is a sound start. If you mix makers, for example a phone from one company and a laptop from another, a separate manager that works on all of them may suit you better.

A faded phone and browser window with small safe icons ask Built in? Below, a phone, tablet and laptop linked to one safe are labelled One maker: a sound start. Another set of mixed devices next to a separate safe is labelled Mixed makers: a separate manager may suit you better.(opens the full-size picture)
Check what you already have before you add anything new.

YOUR TURN

Read more

Read the full lesson script

In this lesson, you will see how a password manager remembers your passwords for you. That way, every account can have its own password. And you may already have one.

A password manager is an app that creates, stores and fills in a different strong password for every account. It keeps them in a locked vault, and fills in the right one when you sign in.

Nobody can remember a different strong password for dozens of accounts. A manager can, so each account gets its own. Then, if one website leaks your password, the problem stays at that one site.

Let the manager create your passwords, not just store them. If you only save your old ones in it, every reused password comes along too. The random passwords it creates are stronger than any you would make up.

Is it risky to keep every password in one place? A good manager keeps them encrypted, which means scrambled, and only you hold the key. Britain's National Cyber Security Centre says that, used correctly, it protects you far better than memory, sticky notes or reused passwords.

Which passwords do you still memorize? Just a few. The manager's own password, the key to everything inside. And your device login, like the password that unlocks your computer. Make those from three random words, and use them nowhere else.

Your phone or web browser, the app you use to visit websites, may already have a password manager built in. If all your devices come from one maker, that is a sound start. If you mix makers, a separate one may suit you better.

So, let a password manager create and remember a different password for every account, and keep only a few in your head. Before the next lesson, check whether your phone or browser already has one built in. Next, you will add a second lock, called two-step verification, to your accounts and your password manager.