Anúncios
If you reuse two or three passwords across everything, one leak from one forgotten shopping site is enough for someone to try that same password on your email and bank. A password manager fixes this by remembering a different strong password for every account and filling it in for you, so you only have to remember one.
The good news in 2026 is that you probably already have a decent free one on your phone, and the paid ones are cheaper than a streaming subscription. This guide compares the five I think most people should choose between: Bitwarden, 1Password, Proton Pass, Apple Passwords, and Google Password Manager. For each one you get what it is good at, what it gets wrong, what it costs, and a tip for getting started. You will also find a plain explanation of passkeys and the steps to switch from one manager to another without losing anything.
Prices below were checked on each company’s site in October 2026 and are in US dollars.
How to choose in one minute
The biggest question is which devices you use. If everything you own is Apple, Apple Passwords is free and good enough for most people. If you live in Android and Chrome, Google Password Manager is the same story. The moment your household mixes iPhone, Android and a Windows computer, or you want to share passwords with family on different phones, a cross-platform app like Bitwarden, 1Password or Proton Pass makes life easier.
| App | Free plan | Paid price (billed yearly) | Works on | Best for |
|---|---|---|---|---|
| Bitwarden | Yes, unlimited passwords and devices | $19.80/year Premium, $47.88/year Families (6 people) | iPhone, Android, Windows, Mac, Linux, web | Most people who want free and cross-platform |
| 1Password | No (14-day trial) | $3.99/month Individual, $5.99/month Families (5 people) | iPhone, Android, Windows, Mac, Linux, web | Families who want the most polished app |
| Proton Pass | Yes, unlimited passwords and devices | $35.88/year Plus, $59.88/year Family (6 people) | iPhone, Android, Windows, Mac, Linux, web | Privacy-minded users, email aliases |
| Apple Passwords | Free, built in | None | iPhone, iPad, Mac, Windows via iCloud | All-Apple households |
| Google Password Manager | Free, built in | None | Android, Chrome on any device | Android and Chrome users |
The five password managers compared
Bitwarden
Bitwarden is open source and has the most generous free plan of any cross-platform manager: unlimited passwords on unlimited devices, plus sharing with one other person. Its code is public and independently audited, which matters for an app that holds the keys to everything.
What is good: the free tier is enough for most people, it works everywhere, and it handles passkeys. What is not: the apps are functional rather than pretty, and autofill on iPhone sometimes needs an extra tap compared with Apple’s built-in option. Some useful extras, like the built-in authenticator for 2FA codes, file attachments and emergency access, are Premium-only. Premium is $19.80 a year ($1.65 a month) and Families is $47.88 a year for up to six people, according to Bitwarden’s pricing page.
Tip: after you add the app, go to the Bitwarden settings and turn on opening the vault with Face ID or fingerprint, so you do not type your master password ten times a day.
1Password
1Password is the most polished of the group. Setup is guided, autofill is reliable on both iPhone and Android, and family sharing with separate vaults works well for households. Watchtower flags reused, weak and leaked passwords, and Travel Mode can hide vaults from your phone when you cross a border.
What is not good: there is no free plan, only a 14-day trial, and it is the most expensive option here. 1Password lists Individual at $3.99 a month and Families at $5.99 a month for up to five people, both billed yearly, and it often runs promotions that lower the first year. Your account also uses a 34-character account key alongside your master password. It adds protection, but you must keep the Emergency Kit PDF it gives you, or you can be locked out on a new device.
Tip: print the Emergency Kit during setup and put it with your important papers. It is the one thing that gets you back in.
Proton Pass
Proton Pass comes from the Swiss company behind Proton Mail. The free plan has unlimited logins, notes and cards on unlimited devices, two vaults, and ten hide-my-email aliases. An alias is a throwaway email address that forwards to your real inbox, so shopping sites and newsletters never see your real address. That feature alone makes it worth a look.
What is not good: it is younger than Bitwarden and 1Password, so some edge-case autofill on banking apps is less reliable, and the built-in 2FA code generator and unlimited aliases need the paid plan. Pass Plus is $35.88 a year (or $4.99 billed monthly) and Pass Family is $59.88 a year for six people.
Tip: when a store asks for your email at checkout, tap the Proton Pass icon and create an alias instead. If that store later leaks or sells your address, delete the alias and the spam stops.
Apple Passwords
Since iOS 18, Apple’s saved passwords live in their own Passwords app, and it is still the built-in option on iOS 26. It is free, syncs through iCloud with end-to-end encryption, stores passkeys, generates 2FA codes, and lets you share a group of passwords with family members.
What is not good: there is no Android app, and on Windows you need iCloud for Windows plus a browser helper. If anyone in your house uses Android, this is the wrong pick for shared logins. Moving out is also harder than with other managers: on iPhone, iOS 26 added an option to send passwords to another app, but only to apps that support Apple’s transfer standard, so check your new manager’s help page first.
Tip: open the Passwords app and tap Security. It lists reused, weak and leaked passwords; fix the ones for email and banking first.
Google Password Manager
Google Password Manager is built into Android and Chrome. On a Pixel running Android 16 you will find it under Settings > Passwords, passkeys & accounts; on Samsung, Settings > General management > Passwords, passkeys and autofill (Samsung phones also have Samsung Pass, which is a separate service). It is free, stores passkeys, checks your passwords against known leaks, and works on iPhone through the Chrome app.
What is not good: autofill outside Chrome on an iPhone is clunky, it has no proper family sharing of whole vaults, and it is tied to your Google Account, so if that account is compromised, everything is. If you rely on it, make sure your Google Account has strong two-factor authentication; our guide on how to set up two-factor authentication covers it step by step.
Tip: visit passwords.google.com from any browser to run Password Checkup and see every compromised or reused password in one list.
Passkeys, explained simply
A passkey is a sign-in that replaces your password. Instead of typing something, you confirm with Face ID, your fingerprint or your phone’s screen lock, and your phone proves to the site that it is you using a pair of digital keys. One key stays on your device; the website only ever holds the other, which is useless on its own.
Two things make passkeys better than passwords. A website leak exposes nothing usable, and a passkey only works on the real website it was made for, so a fake login page from a scam text cannot collect it. If you want to see how those fake pages work, our guide on how to spot text message scams has examples.
All five managers here can store passkeys. When a site offers “Create a passkey” or “Sign in faster next time,” say yes and let your password manager save it. Keep the old password stored too for now, since some sites still ask for it on certain devices. Google, Apple, Microsoft, Amazon, PayPal and many banks already support passkeys.
How to switch password managers without losing anything
Switching takes about 20 minutes. Do it in this order.
- Get the new manager set up first and sign in on your phone and computer.
- Export from the old one. From Google Password Manager, open passwords.google.com (or Chrome’s Password Manager), go to Settings, and choose Export passwords; Google’s import and export help page has the current steps. From Apple Passwords, use the export option in the Passwords app on a Mac (in the File menu) or the iOS 26 transfer option if your new manager supports it. From Bitwarden, 1Password and Proton Pass, the export option is in settings.
- Import into the new manager. Each one has an Import menu that recognizes files from the others.
- Delete the exported file right away and empty the trash. It holds all your passwords in plain text.
- Set the new manager as your autofill service. On iPhone: Settings > General > AutoFill & Passwords, then turn on the new app. On Pixel: Settings > Passwords, passkeys & accounts, then choose your preferred service. On Samsung: Settings > General management > Passwords, passkeys and autofill.
- Turn off saving in the old one so you do not end up with two half-updated lists. Wait a couple of weeks before deleting anything.
Passkeys are the one thing a CSV file does not carry. They move only between apps that support the new credential transfer standard; otherwise, sign in to each site and create a new passkey in the new manager.
Common questions
Are password managers safe if they get hacked?
The good ones encrypt your vault on your device with your master password before it ever reaches their servers, so a breach of the company exposes scrambled data. What protects you is a long, unique master password and 2FA on the manager account. Never reuse your master password anywhere.
Is the free one built into my phone good enough?
For many people, yes. Apple Passwords and Google Password Manager are both solid. The reasons to pay are mixed iPhone and Android households, family sharing, and extras like email aliases or emergency access.
What happens if I forget my master password?
With most managers, nobody can recover your vault, which is the point. Set up the recovery options when you start: 1Password’s Emergency Kit, Bitwarden’s emergency access (Premium), or account recovery with Apple and Google. If you lose your phone, our checklist on what to do if your phone is lost or stolen covers getting back into your accounts.
Which one I’d pick
If you use only Apple devices, start with Apple Passwords; it is already there and does the job. If you use only Android and Chrome, the same goes for Google Password Manager. For everyone else, I would pick Bitwarden’s free plan, because it covers every device for nothing and upgrades cheaply. Choose 1Password if you are setting up a whole family and want the smoothest experience and are fine paying for it, and Proton Pass if hiding your real email address from stores and apps matters to you.
Whatever you choose, this weekend change the passwords for your email, bank and phone carrier to new ones generated by the manager, and turn on passkeys wherever a site offers them. Those three accounts protect almost everything else.
