Skip to main content

    Password Managers: Do You Need One?

    A password manager remembers strong, unique passwords for every account so you do not have to. Here is what one does and how to start using it.

    3 min read5 stepsChecked Aug 2026

    A password manager is a program that creates, stores, and automatically fills in passwords for your online accounts. You only need to remember one strong "master" password to unlock it. It solves a real problem: using the same simple password everywhere is convenient, but if one of those sites is ever hacked, criminals try that same password on your email, bank, and other accounts. This is called "credential stuffing," and it works far more often than people expect.

    1. Step 1: Check the password manager you already have

      On an iPhone, go to SettingsPasswords to see saved logins and generate new ones. On an Android phone, open Chrome, tap the three dots menu → SettingsPassword Manager. Both are free and already installed.

    2. Step 2: Turn on autofill

      On iPhone: SettingsPasswordsPassword Options → turn on "AutoFill Passwords." On Android: in Google Password Manager settings, turn on "Auto Sign-in." This lets your phone fill in saved passwords automatically when you log into an app or website.

    3. Step 3: Let it generate strong passwords for new accounts

      When you create a new account or change a password, look for a suggested strong password from your phone or browser. It is often shown automatically in the password field. Use it instead of typing your own — your phone remembers it for you.

      Quick Tip

      Start with your email and banking passwords first. These protect your most important accounts if something else gets breached.

    4. Step 4: Set a strong master password or use your fingerprint/face

      Most password managers unlock using your phone's existing Face ID, fingerprint, or passcode, instead of a separate password to remember. Make sure your phone's screen lock is turned on, since it protects the password manager too.

    5. Step 5: Turn on two-factor authentication where offered

      For your most important accounts — email, banking, Medicare, Social Security — turn on two-factor authentication (2FA) in addition to a strong password. This sends a code to your phone, so a stolen password alone cannot get someone in.

      Warning

      Never share a two-factor code with anyone who calls or texts asking for it, even if they claim to be your bank or a tech support agent. A legitimate company never needs you to read that code aloud.

    More about this

    A password manager instead creates a long, random, unique password for every single account. That way, a breach at one company cannot be used to break into your others. It also fills those passwords in automatically on websites and apps — often faster than typing them yourself, and it removes the temptation to write passwords on paper or reuse the same one out of frustration.

    You likely already have a free password manager built into your phone or browser. iPhones have "Passwords" built into Settings, using iCloud Keychain to sync across your Apple devices. Android phones and Chrome have Google Password Manager built in. Both are free, reasonably secure, and a big improvement over reusing passwords — no extra app needed to get started. Dedicated apps like 1Password or Bitwarden offer more features, such as easier use across different device brands, for a low monthly fee (or free, in Bitwarden's case, for individual use).

    (Sources: FTC consumer guidance on passwords — consumer.ftc.gov; Cybersecurity and Infrastructure Security Agency — cisa.gov)

    Official sources

    Did this guide fix your problem?

    Still stuck?

    A real person can walk you through it over the phone.

    Get help from a person

    Related guides