Nothing Special   »   [go: up one dir, main page]

You might be using an unsupported or outdated browser. To get the best possible experience please use the latest version of Chrome, Firefox, Safari, or Microsoft Edge to view this website.

6 Best Password Managers Of 2024

Written By
Former Staff Reviewer
Written By
Former Deputy Editor

Expert Reviewed

|Business Expert
& 2 others
Editorial Note: We earn a commission from partner links on Forbes Advisor. Commissions do not affect our editors' opinions or evaluations.

It’s tempting to use the same password for all your accounts, but that opens you up to all sorts of cybersecurity risks. It’s also a huge headache to memorize and keep track of all your credentials. That’s where a password manager can be useful. These services store and keep unique passwords for all your different services in a centralized, secure location. Best of all, these systems typically cost a few dollars a month—and some are free.

Forbes Advisor evaluated the best password managers available today. We selected these options based on cost, features, usability and other factors. Find the right solution for your needs.

Read more

The Best Password Managers of 2024

  • NordPass: Best browser extension with passkey generation
  • Dashlane: Best password customizations and password health tool
  • Bitwarden: Best affordable open-source solution
  • 1Password: Best password manager for beginners
  • KeePass: Best free password manager
  • Keeper: Best multifactor authentication customization

Why You Can Trust Forbes Advisor Small Business

The Forbes Advisor Small Business team is committed to bringing you unbiased rankings and information with full editorial independence. We use product data, strategic methodologies and expert insights to inform all of our content and guide you in making the best decisions for your business journey.

We reviewed software options using a detailed scoring process to help you find the eight best password managers. Our ratings looked at factors important to small businesses, such as offering affordable pricing, feature functionality, quality customer support, and a final review by our panel of experts. All ratings are determined solely by our editorial team.

Learn More: How We Evaluate Password Managers


Best browser extension with passkey generation

NordPass

NordPass
4.4
Our ratings are calculated based on fees, rates, rewards and other category-specific attributes. All ratings are determined solely by our editorial team.

Starting price

Free or $1.79 per month

(billed annually)

Multifactor authentication options

Authenticator apps, security keys and backup codes

Supported platforms

Windows, iOS, Android, MacOS and Linux

NordPass
Learn More Arrow

On NordPass' Website

Free or $1.79 per month

(billed annually)

Authenticator apps, security keys and backup codes

Windows, iOS, Android, MacOS and Linux

Editor's Take

Features

NordPass functions as a browser-based app or as a desktop and mobile app for all major platforms. Along with the usual password storage and generator features, the app offers several different forms of multifactor authentication, a data breach scanner, a password health checker and an email masking tool. These features work more or less as intended, and I didn’t encounter any major issues during testing. However, readers interested in the email masking tool should be aware that email masking stops working if you stop using NordPass, meaning messages sent to the masked email won’t show up in your inbox anymore.

Howard Poston, a cybersecurity expert and our advisory board member, also likes the data breach scanner feature: “The integrated data breach scanner is a great feature. If a password is breached, change it immediately and enable MFA if you haven’t already.”

Pricing

NordPass has a free plan, but it’s very limited compared to its competitors. You can only have one user per account and can only perform the most basic of password manager tasks, like saving your passwords. For individual users and families, there are Premium and Family tiers starting at $1.99 per month and $3.69 per month for the first year, respectively. After that first year, the price bumps up to $2.99 per month and $5.99 per month, respectively. These are annual subscriptions, as NordPass does not offer monthly subscriptions at this time. I don’t generally recommend new customers start with an annual subscription for any product, though NordPass does offer a 30-day free trial.

For interested businesses, NordPass offers an array of plans to fit your needs as well. These plans charge per user per month and start at $1.79 per user per month for the lowest Teams plan and go up to $5.39 per user per month for the Enterprise plan. Again, these are the annual subscription numbers, as there is no monthly plan.

Per-user pricing is not uncommon for business software, but in some instances like this one, businesses looking to use NordPass might quickly find it very expensive. Worse, NordPass only offers a 14-day free trial for its Teams and Business tiers, which I don’t feel is enough time for anyone to decide if a plan is right for them.

Trustworthiness

As part of Nord Security’s product family alongside NordVPN and NordLayer, NordPass’s reputation is tied to Nord Security’s. While NordPass itself hasn’t been subject to any data breaches that I could find, NordVPN was hit by a data breach in early 2018 when it, along with other top VPNs like TorGuard VPN, was hacked by an 8chan user. Nord claimed it wasn’t notified of the incident until April 2019, a year after the breach reportedly happened, but it waited nearly six months to tell users.

While there definitely needs to be time to audit servers in the event of a breach, six months is a long time to leave users in the dark, and it makes me wary of how Nord Security might handle data breaches for its other products, like LastPass. The incident is nearly six years old now, and Nord Security has had plenty of time to potentially shore up its security infrastructure and update its policy about data breach disclosures. However, it’s hard to believe companies supposedly dedicated to preserving user privacy deserve second chances, and Nord Security needs to do a lot more to earn one in my eyes.

Learn more: Read our full NordPass review.

Pros & Cons
  • Monitor the internet to catch breaches early
  • Create groups for sharing passwords internally and control access
  • Can recover your account if you lose your master password
  • Email masking tool is interesting
  • Freeware is very limited compared to competing managers
  • The “per user” pricing makes premium business plans very expensive for larger companies
  • No monthly option
Quick Specs
Supported Platforms
Windows, iOS, Android, MacOS and Linux
Browser Extensions
Chrome, Firefox, Edge, Safari, Opera, and Brave
Multifactor Authentication
Yes
Auto-Fill Web Forms
Yes
Import Data from Web Browsers
Yes
Support for Multiple Forms
Yes
Biometric Functionality
Yes
Mobile PIN Unlock
Yes

Best password customizations and password health tool

Dashlane

Dashlane
4.2
Our ratings are calculated based on fees, rates, rewards and other category-specific attributes. All ratings are determined solely by our editorial team.

Starting price

$4.99 per month

(billed annually)

Multifactor authentication options

Authenticator apps and verification codes via email or text

Supported platforms

Android, iOS and select web browsers for desktop

Dashlane
Learn More Arrow

On Dashlane's Website

$4.99 per month

(billed annually)

Authenticator apps and verification codes via email or text

Android, iOS and select web browsers for desktop

Editor's Take

Features

Dashlane has many of the features I expect from a password manager, such as password sharing and the availability of more than one multifactor authentication option. Its browser extension even comes with a VPN, though I’d generally recommend purchasing a dedicated VPN provider like Mullvad VPN instead.

I also liked the password customization settings, which allow you to require your master password for selected websites, auto-logins and autofill disabling. Its password health checker works well enough, and I didn’t encounter any issues with any other aspects of the app.

My biggest concern with Dashlane is that it’s web-only, meaning that if you’re offline, you won’t have access to any of your credentials or any of Dashlane’s other features. I prefer locally hosted password managers so you can access that sensitive information even offline.

Howard Poston, our advisory board member, offered this tip: “If you use Dashlane, take advantage of its password customization settings. They let you balance usability and security for various sites.”

Pricing

Dashlane has four pricing tiers: Premium, Friends & Family, Business and Enterprise. Business and Enterprise are, as the names imply, meant for business customers, while Premium and Friends & Family are targeted more at individual consumers. The Premium tier costs $4.99 per month for one year, and the Friends & Family plan costs $7.49 per month for every 10 family members for one year.

This is on the higher end for a password manager, and unless you’ve got a large enough group to justify the Friends & Family plan, I’m not certain the Premium tier is worth the price for what you get. Thankfully, Dashlane does offer a 30-day free trial for its Premium plan to see if it’s right for you.

Meanwhile, the Business tier costs $8 per seat per month for one year. The pricing for its Enterprise plan isn’t listed, and you’ll need to contact Dashlane directly to get a price quote. Although a free trial is available for the Business plan, it only lasts for 14 days, which I feel isn’t really enough time to get a good feel for the software and how it fits your business’s needs. Eight dollars per user can add up really quickly, and even if Dashlane were the absolute best password manager on the market, it’s probably not worth the steep cost for most small businesses, especially when compared to the cheaper alternatives with near-equivalent product quality on the market.

Trustworthiness

Dashlane Inc. owns Dashlane, and while it hasn’t encountered any major data breaches like LastPass, for example, it’s not perfect. In late 2023, security researchers found a major vulnerability in Dashlane and five other major password managers that could be used to steal Android users’ credentials via the AutoFill function. As far as I can tell, no data has been breached yet, but it is something to keep in mind. Overall, Dashlane is far from the least trustworthy company in the password manager space.

Learn more:  Read our full Dashlane review.

Pros & Cons
  • Easy to understand and use
  • 2FA and SSO availability
  • Lets employees create groups and share passwords
  • No monthly options
  • Limited to one or two devices without a massive upgrade
  • Pricing can get very expensive very fast
  • Web-only, which means you can’t use any features offline
Quick Specs
Supported Platforms
Android, iOS and select web browsers for desktop
Browser Extensions
Chrome, Firefox, Edge, Safari
Multifactor Authentication
Yes
Auto-Fill Web Forms
Yes
Import Data from Web Browsers
Yes
Support for Multiple Forms
Yes
Biometric Functionality
Yes
Mobile PIN Unlock
Yes

Best affordable open-source solution

Bitwarden

Bitwarden
4.2
Our ratings are calculated based on fees, rates, rewards and other category-specific attributes. All ratings are determined solely by our editorial team.

Starting price

Free or $10 per year

(billed annually)

Multifactor authentication options

FIDO2 Web Authentication credentials, authenticator app, email, Duo Security (individual), Duo Security (organizations) and YubiKey

Supported platforms

Windows, MacOS, Android, iOS and Linux

Bitwarden
Learn More Arrow

Read Forbes' Review

Free or $10 per year

(billed annually)

FIDO2 Web Authentication credentials, authenticator app, email, Duo Security (individual), Duo Security (organizations) and YubiKey

Windows, MacOS, Android, iOS and Linux

Editor's Take

Features

Bitwarden has all the features I could ask for from a password manager, including a password health tool and a data breach monitor. On top of that, it’s open-source, a feature I love to see from cybersecurity products. Too often, tech products, especially cybersecurity products, function more or less as black boxes, not letting customers get under the hood and really see what’s going on with their purchase. So, any solution that avoids this gets big points from me. It also has apps for all major operating systems, as well as browser extensions for Edge, Chrome, Firefox, Safari, Opera, Vivaldi, Brave and Tor.

Bitwarden’s actual features work well, and I would recommend this product for most individual users thanks to its relatively generous free tier. I encountered no issues during testing and was really impressed with the software overall. Bitwarden does have a bit of a learning curve, particularly when it comes to sharing passwords with other users, but the rest of the app’s positives outweigh this small flaw. It supports multiple different methods of MFA, including an authenticator app, email and YubiKey.

Howard Poston, our advisory board member, gives the free plan high marks: “Bitwarden’s free tier really is excellent. The main things it lacks (breach monitoring and an authenticator app) are available for free elsewhere.”

Pricing

Bitwarden has three pricing tiers for personal users and two for business users. Private customers can start with the Free tier, which gives them all of the basic features of a password manager across an unlimited number of devices, along with the ability to share passwords and vaults with one other user.

The Premium tier costs $10 per year, or about 83 cents per month, and unlocks the data breach monitor and the Bitwarden Authenticator app, among other features. You can still only share passwords with one other user, though. The Family tier is effectively the same as the Premium tier but offers you six accounts that can all share passwords with one another. It costs $40 per year or about $3.33 per month. The Family tier comes with a seven-day free trial, which is incredibly short. However, Bitwarden’s free tier is strong enough that this isn’t a major negative from my perspective.

For businesses, Bitwarden’s two tiers are Teams and Enterprise. Teams costs $4 per user per month and effectively functions like a bunch of Premium accounts stacked atop one another that can all share passwords with each other. Enterprise unlocks more features, like passwordless single-sign-on (SSO) and account recovery. It costs $6 per user per month. Businesses looking for a more bespoke experience can also contact Bitwarden directly for a quote.

The per-user pricing means Bitwarden can quickly become expensive for businesses, made all the worse by its small seven-day free trial for these Business plans. I’d prefer to see that expanded a bit so companies have more time to determine if Bitwarden is right for them.

Trustworthiness

Being free and open-source is enough for Bitwarden to earn a lot of points in the trust department. The app has had some security vulnerabilities noticed by security experts in the past few years, such as an autofill vulnerability similar to the one found for Dashlane. Despite this, I generally trust Bitwarden as a reliable password manager for most users.

Learn more: Read our full Bitwarden review.

Pros & Cons
  • Supported by an enthusiastic community of users and security experts
  • Free and open-source
  • Data breach monitoring feature is good.
  • Could be expensive for business users
  • Not the easiest to use for less tech-savvy individuals
Quick Specs
Supported Platforms
Windows, MacOS, Android, iOS and Linux
Browser Extensions
Chrome, Firefox, Edge, Opera, Safari, Vivaldi, Brave, and Tor
Multifactor Authentication
Yes
Auto-Fill Web Forms
Yes
Import Data from Web Browsers
Yes
Support for Multiple Forms
Yes
Biometric Functionality
Yes
Mobile PIN Unlock
Yes

Best password manager for beginners

1Password

1Password
4.2
Our ratings are calculated based on fees, rates, rewards and other category-specific attributes. All ratings are determined solely by our editorial team.

Starting price

$2.99 per month

(billed annually)

Multifactor authentication options

Authenticator app and security key

Supported platforms

Windows, MacOS, iOS, Android and Linux

1Password
Learn More Arrow

On 1Password's Website

$2.99 per month

(billed annually)

Authenticator app and security key

Windows, MacOS, iOS, Android and Linux

Editor's Take

Features

1Password does most everything I expect from a password manager. It’s easy to use and even automatically clears clipboards of copied passwords so you don’t have to manually remove sensitive information from your clipboard after use. If you’re a less tech-savvy person looking for an intuitive password management app, this is one of the better options.

Though I prefer lower-tiered plans with better customer support options, 1Password provides access to a knowledge base with some pretty in-depth how-to guides, a chatbot and email support. However, live phone or chat support with a human requires paying for a Business plan, which is a shame.

There also isn’t any password inheritance system in place in the event of the account holder’s death, which can make accessing a bank password, for example, difficult. With a Family plan, you can designate certain users as organizers who should be able to access the account. Still, I’d prefer a dedicated inheritance system where the account holder can name an heir who can access their 1Password account.

Our advisory board member, Howard Poston, shared his thoughts on this password manager: “1Password is really easy to use. Also, the clipboard clearing feature is great for ensuring that you don’t paste a password somewhere by accident (such as a shared doc).”

Pricing

Unlike many of its contemporaries, 1Password unfortunately lacks a free version of its service. On top of that, its free trial is pretty short, at only 14 days. I generally like to see companies offer a 30-day free trial if they don’t have a free version. If you decide to purchase 1Password, there are four tiers you can choose from: Individual, Families, Team Starter Pack and Business.

Individual costs $2.99 per month for one year (annual billing) and gives you access to most every feature you could ask for as an individual user. The Families plan costs $4.99 per month (annual billing) and provides the same benefits as Individual but for up to five users. The Teams Starter Pack costs $19.95 per month for up to 10 users. The Business tier starts at $7.99 per user per month for one year (annual billing), but if you want a more customizable experience, you can also contact 1Password directly to get a quote.

While 1Password makes its annual prices public on its websites, its monthly prices are obscured. In fact, when you sign up for a 1Password account, you are, by default, locked into the annual subscription for whatever plan you choose. You have to go into your Billing settings to switch to monthly or even see the monthly price. In general, I recommend users try a product’s monthly subscription before locking into a more expensive annual one, and the fact that 1Password makes it so difficult to do this is a negative in my eyes.

Trustworthiness

For the most part, 1Password is pretty clean. While I’d love for it and other password managers to be open source like Bitwarden or KeePass are, this isn’t going to be a dealbreaker for most people. The same AutoFill security vulnerability found in Dashlane’s Android app was also discovered within 1Password’s Android password managerapp in late 2023, but no major data breaches have been reported. Toronto-based company AgileBits, the developer of 1Password, hasn’t been subject to any major controversy either.

Learn more: Read our full 1Password review.

Pros & Cons
  • Does not allow information to be copied to any site you haven’t visited
  • Affordable, flat-rate monthly fee for smaller teams
  • Very easy to use
  • No free version and short free trial period
  • No password inheritance system
  • Limited customer support for lower-tiered plans
  • Prices aren’t fully publicly available
Quick Specs
Supported Platforms
Windows, MacOS, iOS, Android and Linux
Browser Extensions
Chrome, Firefox, Edge, Safari, and Brave
Multifactor Authentication
Yes
Auto-Fill Web Forms
Yes
Import Data from Web Browsers
Yes
Support for Multiple Forms
Yes
Biometric Functionality
Yes
Mobile PIN Unlock
Yes

Best free password manager

KeePass

KeePass
4.1
Our ratings are calculated based on fees, rates, rewards and other category-specific attributes. All ratings are determined solely by our editorial team.

Starting price

Free

Multifactor authentication options

Plugins allow for a variety of MFA implementations

Supported platforms

Windows, MacOS, iOS, Android and Linux

KeePass
Learn More Arrow

Read Forbes' Review

Free

Plugins allow for a variety of MFA implementations

Windows, MacOS, iOS, Android and Linux

Editor's Take

Features

KeePass is incredibly customizable and, thanks to plugins, packs many of the features we would want from a password manager. There’s a share password option, auto-typing, multiple MFA methods and the ability to import/export data to various file formats alongside a whole host of upgrades and add-ons to fit your needs.

While KeePass is user-friendly, it belongs to an older era of software development that assumed users possessed some basic computer knowledge. However, this expectation may not hold true in today’s era of software products that aim for effortless usability. The high customizability of the app comes with an attendant learning curve that some users might not want to engage with.

The interface might also be a pain point for some people. The app was initially developed in 2003, and the interface looks it. Not everyone will be accustomed to that sort of UI these days, but I found it refreshing.

In more ways than one, KeePass feels like it was ripped from a different time in the best way. The software is community-driven, meaning that even if the base software lacks some feature you want from a password manager, there’s probably a plugin someone’s developed that does the job. For example, want to enhance the auto-type feature? There’s a plugin for that. Want to add the TwoFish encryption algorithm to KeePass? There’s a plugin for that. Want to import passwords from 1Password to KeePass? There are at least two plugins for that.

This kind of free, open-source, community-maintained software just doesn’t normally get the sort of market penetration it used to. KeePass has managed to hold on to its place in the password manager game since 2003, and I think that’s kind of great. I wish the tech landscape had a lot more apps like KeePass taking up space.

Pricing

KeePass is the only 100% free password manager on our list. Other password managers have free versions, but these have more limited features than the paid plans. Not so with KeePass, which provides all of its features for free. For many products that I’ve covered, I generally caution users to stay away from 100% free software, but KeePass lacks many of the potential risks I would associate with free software, such as a developer harvesting and selling your data like AVG and Avast did with their free antivirus software.

Howard Poston, our advisory board member, also appreciates that KeePass is free: “If there’s a password manager feature that you want, KeePass probably has it. Even better, it’s free.”

Trustworthiness

I’ll begin by discussing the cons of KeePass. As with all software, KeePass is not immune to bugs and security weak points. The KeePass2Android app was discovered to have the same autofill security vulnerability as Dashlane and 1Password, but no data breaches exploiting that vulnerability have been discovered. Additionally, in May 2023, a proof-of-concept for an exploit on KeePass’s desktop app was released, where a hacker could steal a KeePass user’s master password via memory dump. However, this vulnerability relied on the victim’s computer already being compromised.

There’s also the fact that it’s a community-driven piece of software. While I love this about KeePass, it can lead to awkward situations where people might just stop updating it one day, and the app slowly loses compatibility with modern devices. There’s also the stranger aspect, where you might not want to trust a random person’s KeePass plugin because they don’t have to be compliant with any legal bodies to put out that plugin the way a company ostensibly has to be.

These are valid concerns, though I do think that any piece of software that’s been actively maintained since I was in elementary school is probably not in any danger of shutting down anytime soon, barring a sudden legal crackdown on password managers. And while there is a level of trust you have to place in the community members who develop plugins for KeePass, these plugins are generally regulated by the community itself.

All that said, KeePass is, in my eyes, one of the more trustworthy password managers, thanks to being both open-source and locally hosted. Unlike LastPass, for example, there are no external servers to hack. The data is saved on your device. While your device might not have the security infrastructure in place of a LastPass or a 1Password, you will likely be a much smaller target for a hacker than these providers. And any hackers that do come your way will probably be using social engineering schemes like phishing instead of the hacking style you see in Hollywood where the bespectacled computer guy types for a few seconds before declaring, “I’m in.”

Overall, KeePass is one of my most trustworthy password management solutions. While there are vulnerabilities that can be exploited, none of them are so glaring that I wouldn’t use the software myself.

Learn more: Read our full KeePass review.

Pros & Cons
  • Free to use
  • Excellent encryption of passwords and data
  • Numerous unofficial versions of KeePass that are readily compatible with virtually every operating system and device
  • Open-source
  • Locally-hosted, meaning your passwords aren’t stored somewhere away from your device.
  • Could present a steeper learning curve than other password management software
  • No first-party mobile apps
  • Older interface style might not be as intuitive for all users
  • Being locally hosted does make it a bit more difficult to use in a business context
Quick Specs
Supported Platforms
Windows, MacOS, iOS, Android and Linux
Browser Extensions
Chrome, Firefox, Edge, Safari, and Opera
Multifactor Authentication
Yes
Auto-Fill Web Forms
Yes
Import Data from Web Browsers
Yes
Support for Multiple Forms
Yes
Biometric Functionality
Yes
Mobile PIN Unlock
Yes

Best multifactor authentication customization

Keeper

Keeper
3.6
Our ratings are calculated based on fees, rates, rewards and other category-specific attributes. All ratings are determined solely by our editorial team.

Starting price

$2.92 per month

(billed annually)

Multifactor authentication options

Time-based one-time passwords, authenticator apps, text message and security keys

Supported platforms

iOS, Android, MacOS, Windows and Linux

Keeper
Learn More Arrow

On Keeper's Website

$2.92 per month

(billed annually)

Time-based one-time passwords, authenticator apps, text message and security keys

iOS, Android, MacOS, Windows and Linux

Editor's Take

Features

Keeper is a feature-rich, easy-to-use password manager with the features I expect from a usable password manager, and if that’s all the app was, it might even place higher on the list. However, Keeper is only easy to use if you ignore all the ads you’re confronted with while using the service.

After logging in for the first time, I was hit with a popup ad for upgrading my plan. After setting up a password in the Vault, I got another ad. Several of the interface’s menu tabs? Also turned out to be ads! This sort of behavior would be annoying but expected from a freemium password manager, but Keeper doesn’t even have that excuse, as I had paid for a plan.

Ultimately, while the features available are good, the actual user experience is not worth the hassle when so many other password managers have the same or even more features with a much better user experience.

Howard Poston, our advisory board member, agrees on Keeper’s ad problem: “Keeper’s ads are a major downside for the app. Many of the free/freemium options on this list are ad-free and often offer more features in their free versions.”

Pricing

Keeper has a total of five pricing plans, two for personal use and three for business use. Starting with personal use, the Personal tier costs $2.92 per month (billed annually) and functions as sort of the base tier. Meanwhile, the Family plan costs $6.25 per month (billed annually) and provides additional storage, more user accounts and file/password sharing.

On the business side, the Business Starter plan starts at $2 per user per month billed annually, while the Business tier costs $3.75 per user per month billed annually for extra organizational configurations. Finally, to learn the Enterprise plan’s pricing, you’ll need to contact Keeper directly to get a quote.

Keeper offers a free version and a 30-day free trial for its paid plan. This is exactly what I expect in terms of trial length.

Trustworthiness

Keeper was part of the same Android autofill discovery as 1Password, Dashlane and KeePass, though no data breaches were part of that discovery. That isn’t the only trust issue I have with trusting Keeper. There was also the 2017 incident where Keeper sued Ars Technica and journalist Dan Goodin for defamation over an article where Goodin reported a security vulnerability found on Keeper’s Windows app. The vulnerability was real and later fixed, but the company sued to have the article taken down anyway.

While Keeper has not been subject to any major data breaches or other controversies, the 2017 incident paints the picture of a company more concerned with the appearance of security than the reality of security in our eyes. This was seven years ago as of this writing, and it’s entirely possible Keeper’s view on these vulnerabilities being publicly disclosed has shifted. However, it’s difficult to give companies second chances with my trust or my data, especially cybersecurity companies for whom customer safety ought to be top priority.

This wasn’t even the first time Keeper had used legal action or the threat of legal action against someone reporting on or disclosing a security vulnerability with its software. In 2013, the company threatened to take legal action against Fox-IT if it publicly disclosed a security vulnerability it had found within Keeper’s password manager. For these reasons, I cannot give Keeper a passing grade in the trust department.

Learn more: Read our full Keeper review.

Pros & Cons
  • Works easily across every major OS and browser
  • Basic tier options are somewhat limited compared to competitors
  • Must upgrade for enhanced security
  • Hits you with tons of ads if you haven’t upgraded yet
Quick Specs
Supported Platforms
Windows, MacOS, iOS, Android and Linux
Browser Extensions
Chrome, Firefox, Safari, Opera, Edge, and Brave
Multifactor Authentication
Yes
Auto-Fill Web Forms
Yes
Import Data from Web Browsers
Yes
Support for Multiple Forms
Yes
Biometric Functionality
Yes
Mobile PIN Unlock
Yes

Forbes Advisor Ratings


Methodology

At Forbes Advisor, we use a scoring system where factors are weighted and each consideration contributes to the best possible score. We average each section’s total and add them together to give each product a final score and the items are then ranked accordingly.

Here are the specific factors we looked at to create this best password managers list:

Decision Factor Scoring Weight Description
Pricing
35%
We always check if a provider offers a free plan, as well as how their starting plan price stacks up with its competition.
General Features
25%
Basic features like multi-factor authentication that every password manager should have.
Reviews and Ratings
15%
We checked reviews from aggregator websites G2 and Trustpilot to see how actual customers feel about these products
Expert Analysis
25%
Our experts then took these customer reviews, analyzed them, and graded providers on standout features, ease of use, popularity, and value for money to come up with the best expert score possible for each provider.

Learn More: How We Evaluate Password Managers


How Do Password Managers Work?

Password management tools work by keeping track of your login and password information across every account you own. Consider the many accounts you use that require a login. From social media accounts to online banking, you may have anywhere from several to dozens of passwords to keep track of at any given moment.

Instead of struggling to memorize logins for every account, password managers let you store all account information in a centralized and encrypted vault, accessible through a single master password. Knowing that one login is all you need saves you the headache of memorizing a bunch of complicated passwords. Password managers can also help you generate strong passwords instead of relying on redundant or weak passwords.


Are Password Managers Safe?

Effectively functioning as data vaults, password managers are usually safe and are great for easing the mental load of memorizing a bunch of complicated passwords across so many different accounts, as well as for securely sharing passwords within an organization. They’re not impervious to hacking attempts—because no service or institution is—but the encryption used can be difficult to bypass through brute force.

Password managers can’t help you if you use weak passwords, use the same passwords across many different accounts or share passwords with a large number of people. Similarly, password managers do not keep you safe from phishing attempts or other social engineering attacks designed to trick you into giving up your personal data. Personal vigilance is, ultimately, the best way to protect yourself online.


What To Consider When Buying a Password Manager

The password manager space can feel intimidating if you’re new to the space. With that in mind, here are some tips for how to choose a password manager that’s right for you or your organization:

  • Is the freeware good enough quality to forgo an upgrade? While we normally advocate for paying for the premium stuff in our reviews, the password manager space is populated by several free or freemium apps, in particular Bitwarden and KeePass, that provide an equivalent quality that most personal users would be better off using a free service. Businesses, however, might prefer going for a paid option with more storage and features.
  • What would you do if you lost your master password? That depends entirely on the service you use. Some password managers warn you upfront that you won’t be able to access your account again if you lose your master password. Before setting up a password manager account, always be sure to check what account recovery methods, if any, the provider has available.
  • How easy or hard will it be to train employees to use the new system? Like with any software, there will be a learning curve with a password manager. Some, like KeePass, will have a larger learning curve than others. In general though, most password managers have a pretty simple setup, and you should be able to get your team up to speed with one or two tutorial sessions.

Once you have a general idea of your own or your organization’s needs, you should be much more confident about finding the right password management tool.

Ask an expert

What's your top tip for choosing the best password manager?

Howard Poston

Howard Poston

Business Expert

Zephin Livingston

Zephin Livingston

Staff Reviewer

Amy Smith

Amy Smith

Staff Reviewer

 

Some password managers have a biometric login option, which is convenient and provides protection against a forgotten password. Biometric authentication utilizes unique physical or behavioral characteristics, such as fingerprints, facial features or voice patterns, to verify an individual’s identity. This provides a secure and easy-to-use alternative to entering a master password for every use and can be used to restore access to a vault if the password is lost.

Howard Poston

Howard Poston

Business Expert

 

Always research the company behind the password manager to see if they’ve had any major data breaches or security incidents and how they handled themselves in those situations. All the features in the world won’t make your data any safer if the company behind the product is not implementing best practices and prioritizing the security of user data.

Zephin Livingston

Zephin Livingston

Staff Reviewer

 

Security alerts have helped me find old and forgotten passwords that could be vulnerable, so I suggest choosing a password manager that has this built-in feature. Most do include these notifications of your email addresses or passwords showing up in breaches.

Amy Smith

Amy Smith

Staff Reviewer

How Much Does a Password Manager Cost?

Password manager costs can differ wildly from provider to provider. Many offer free versions or are entirely free, like KeePass. If you’re trying to find a good paid password manager, it’s going to roughly run you somewhere in the $30-$50 per year range for personal use. If you’re trying to get one for your business, most providers charge per user, and the cost will vary depending on the size of your organization.

Cloud-based vs. Locally Managed Password Management

The difference between cloud-based and locally managed password managers comes down to where your information gets stored. When managed locally, all relevant login information is held in a file on your specific device. Cloud-based managers, meanwhile, store everything encrypted in the cloud. When passwords get stored using cloud-based managers, there are no copies made onto the device.

Each type of manager has its advantages and disadvantages. For example, you can easily access password information through a locally managed service. However, if you lose the device, you also lose access to all of your stored passwords if you didn’t backup the vault files on a USB drive or other portable device. Likewise, password data stored in the cloud can be used across all of your devices, but the service is unavailable if you lack Internet access. It is ultimately a matter of personal preference and specific needs.


Where Is LastPass?

In previous iterations of this list, LastPass was a featured player, and the service remains one of the most well-known password managers in the mainstream. When I was tasked with updating the list, my first decision was to remove LastPass due to the sheer number of security breaches the company has been hit by over the years, going all the way back to 2011.

In 2015, hackers managed to get ahold of encrypted master passwords and account email addresses, among other sensitive data. Finally, in August 2022, the most infamous breach in LastPass’s history occurred.

According to LastPass’s initial statement, the breach was caused by a single bad actor who gained access to the Development environment through a compromised developer endpoint. The person acted within a window of four days, during which LastPass’ security team detected and shut down the issue.

Following the outcome of their August investigation, LastPass determined that because no customer data was compromised, users need not take any actions such as changing passwords or login information.

However, the company revealed in December 2022 that another data breach had occurred after a high-level LastPass employee was targeted using data obtained from the August 2022 breach. This attack exploited a bug in the employee’s un-updated version of streaming platform Plex.

The second attack had more immediate consequences for LastPass users. In September 2023, security experts linked the theft of $35 million in cryptocurrency across 150 victims to the 2022 data breach.

While I do appreciate LastPass’s transparency regarding these data breaches, I do not consider the company or its app secure enough to recommend to our readers at this time and likely will not consider it secure in the future, either.

Password managers are, ultimately, cybersecurity products ostensibly meant to keep you safe on the internet, and the companies making them have a duty to protect the data of their customers. LastPass has failed to do so on multiple occasions, and frankly, I don’t believe they should be given another chance to slip up.


Frequently Asked Questions (FAQs)

What is the safest way to keep passwords?

The safest way to keep passwords is dependent on your situation and what works best for you. In most business settings, I recommend a good password manager for security and the convenience of not needing to keep all your passwords in your head. For personal use, in settings where others are unlikely to have access to your office, keeping your passwords on pen and paper works just as well, provided you can keep track of the paper.

Can I get a free password manager?

Yes, you can get a free password manager. I would recommend Bitwarden as a good free option.

What happens if I forget my master password?

Before signing up with a password provider, make sure the service provider has a protocol in place for losing a master password. Otherwise, you could lose your account permanently.

Are there advantages to paid password managers compared to free options?

Free password managers offer basic features but may not offer all the features you are seeking. If so, you should upgrade to a paid version. Most of the password management options on our list offer free trials, so you can try out the one that has the features you want or need before committing to a subscription plan.

What are the main risks of using a password manager?

Although many password managers are secure, centralizing your passwords in one location can set up a pretty large point of failure. If you forget your master password or, in the case of cloud-based managers, can’t access the Internet, you’ll be unable to access any of your saved passwords. With locally managed services, you could lose your passwords if your device breaks or is otherwise unavailable.

Can password managers be hacked?

While it can be difficult to do so, yes, password managers can be hacked, as can any website you’ve ever created an account for online. Nothing on the Internet is truly 100% hacker-proof, as numerous data breaches and hacks have shown over the years. To better keep your information safe, whether you use a password manager or not, I recommend not sharing your account information and periodically changing your passwords.


Next Up In Password Manager


Information provided on Forbes Advisor is for educational purposes only. Your financial situation is unique and the products and services we review may not be right for your circumstances. We do not offer financial advice, advisory or brokerage services, nor do we recommend or advise individuals or to buy or sell particular stocks or securities. Performance information may have changed since the time of publication. Past performance is not indicative of future results.

Forbes Advisor adheres to strict editorial integrity standards. To the best of our knowledge, all content is accurate as of the date posted, though offers contained herein may no longer be available. The opinions expressed are the author’s alone and have not been provided, approved, or otherwise endorsed by our partners.
The Forbes Advisor editorial team is independent and objective. To help support our reporting work, and to continue our ability to provide this content for free to our readers, we receive compensation from the companies that advertise on the Forbes Advisor site. This compensation comes from two main sources. First, we provide paid placements to advertisers to present their offers. The compensation we receive for those placements affects how and where advertisers’ offers appear on the site. This site does not include all companies or products available within the market. Second, we also include links to advertisers’ offers in some of our articles; these “affiliate links” may generate income for our site when you click on them. The compensation we receive from advertisers does not influence the recommendations or advice our editorial team provides in our articles or otherwise impact any of the editorial content on Forbes Advisor. While we work hard to provide accurate and up to date information that we think you will find relevant, Forbes Advisor does not and cannot guarantee that any information provided is complete and makes no representations or warranties in connection thereto, nor to the accuracy or applicability thereof. Here is a list of our partners who offer products that we have affiliate links for.
lorem
Are you sure you want to rest your choices?