Technologies

Best password manager to use for 2021

Ditch the sticky notes and get peace of mind. One of our favorite password managers can be your first defense against getting hacked.

Working remotely has become routine for many of us, which means that it’s more essential than ever to secure your online accounts with strong passwords. But it can be a challenge to memorize dozens and dozens of passwords, and it’s downright dangerous to use the same old password over and over.

If you find yourself consistently getting locked out of one online account or another because you’re drawing a blank when you try to log in, it’s time to consider a password manager, which can help you seamlessly oversee and handle all your login credentials while maintaining password security. They’re also handy for autofilling forms and syncing your data across Windows PCs and Macs, iPhones, iPads, Android phones and more.

A password manager is essentially an encrypted digital vault that stores secure password login information you use to access apps and accounts on your mobile device, websites and other services. In addition to keeping your identity, credentials and sensitive data safe, the best password manager also has a password generator to create strong, unique passwords and ensure you aren’t using the same password in multiple places (password generation really comes in clutch when you can’t come up with yet another unique password on the fly for the latest must-have iOS app). With all the recent news of security breaches and identity theft, having a unique password for each location can go a long way to ensuring that if one site gets hacked, your stolen password can’t be used on other sites. You’re basically using multiple passwords to create your own security features.

Plus, with a manager, you don’t have to remember the various pieces of login information, such as shipping addresses and credit card information. With just one master password, or in some cases a PIN or your fingerprint, you can autofill a form or password field. Some also feature online storage and an encrypted vault for storing documents.

All our best password manager picks come in free versions, which typically let you securely store passwords for one device — although our pick for the best free manager can currently be used for syncing across multiple devices — and all handle hardware authentication through YubiKey. Our best password security manager picks also feature subscription options that let you sync your secure password login information across devices, share credentials with trusted family and friends, and get access to secure online storage. And if transparency is important to you, several of our picks are open-source projects. We also look at what a password manager is, its security features and the basics of how to use one.

Note that these password manager services are independently chosen by our editors. We’ll be updating this story periodically as new options become available. In light of our top choice’s recent pricing change, we may be reconsidering the order in the near future, and will update this story accordingly.

Read more: The best web hosting providers

Other free and paid options worth considering

Bitwarden, LastPass and 1Password are solid, affordable (or free) password keepers, and in a straw poll of CNET staffers, they were about neck-and-neck in use. But if you find none of our three recommended password managers works quite how you want, a handful of other apps are worth considering. These all have free versions available.

Dashlane

Offers limited free version (50 passwords on one device)
Base price beyond free: $59.88 per year
Works with: Windows, MacOS, Android, iPhone and iPad. Browser extensions for Chrome, Firefox, Safari, Internet Explorer, Edge and Opera.

Dashlane provides a simple and secure way to manage your passwords and keep other login information stored. Just for managing passwords, we like it as much as our picks, but the free Dashlane app limits you to one device and 50 passwords. The $60 Premium subscription is similar to plans from 1Password and LastPass. The $120 Premium Plus annual subscription adds credit and ID-theft monitoring.

Keeper

Offers limited free version (unlimited passwords on one device)
Base price beyond free: $35
Works with: Windows, MacOS, Linux, Android, iPhone and iPad. Browser extensions for Chrome, Firefox, Safari, Internet Explorer, Edge and Opera.

Keeper is another secure password manager that helps you manage login info on Windows, MacOS, Android and iOS devices. A free version gives you unlimited password storage on one device. The step-up version costs $35 a year and lets you sync passwords across multiple device options. For around $45 a year, you can get 10GB of secure file storage.

KeePassXC

It’s free
Donations accepted
Works with: Windows, MacOS, Linux, Chrome OS, Android, iPhone and iPad, BlackBerry, Windows Phone and Palm OS. Access via the web plus popular browser extensions. (Except for the official Windows version, KeePass for other platforms are unofficial ports.)

KeePass, another open-source software password manager, started on Windows and has been ported using the same code base to other platforms, including MacOS, Android and iOS. On the plus side, it’s totally free and endorsed by the Electronic Frontier Foundation. On the other hand, it’s really for advanced users only: Its user interface takes a bit of fiddling to get all the independently built versions of KeePass to work together.

What about NordPass and Norton Password Manager?

There’s been a shift in the market for VPN and antivirus software in recent months. Many of the companies behind these software packages are expanding them to become wider software suites. For instance: NordVPN now offers NordPass, a dedicated password manager, and Norton now offers a Norton Password Manager as part of its antivirus and identity theft packages. We haven’t specifically reviewed these password storage managers, if only because they don’t yet appear to have a feature set or pricing option that beats any of our preferred options above. If and when that changes, we’ll check them out in more detail.

Password manager basics

Still need more info on what password managers are, and why they’re better than the alternatives? Read on.

How does a password manager work?

To get started, a password manager will record the username and password you use when you first sign in to a website or service. Then the next time you visit the website, it will autofill forms with your saved password login information. For those websites and services that don’t allow automatic filling, a password manager lets you copy the password to paste into the password field.

If you’re stuck picking a good password, a manager can generate a strong password for you and watch that you aren’t reusing it across multiple services. And if you use more than one device, you want a manager that is available across all your devices and browsers, so you can access your passwords and login information — including credit-card and shipping information — from anywhere through the manager app or its browser extension. Some provide secure storage so you can store other items too, such as documents or an electronic copy of your passport or will.

Take note: Many password managers keep the master password you use to unlock the manager locally and not on a remote server. Or if it’s on a server, it’s encrypted and not readable by the company.

This ensures your account stays secure in case of a data breach. It also means that if you forget your master password, there may not be a way to recover your account through the company. Because of that, a few password managers offer DIY kits to help you recover your account on your own. Worst-case scenario, you start over with a new password manager account and then reset and save passwords for all your accounts and apps.

What makes for a secure password?

When trying to avoid a weak password, a good password should be a long string of capital and lowercase letters, numbers, punctuation and other nonalphanumeric characters — something that’s difficult for others to guess, but a snap for a password manager to keep track of. And despite what you may have heard, once you select a good complex password or passphrase, you don’t really need to change it periodically.

Can I use a web browser to manage my passwords and login information?

You can certainly use Chrome, Safari or Firefox to manage your passwords, addresses and other login data. You can even set up a master password to unlock your credentials within a browser. And while using an online browser’s password tool is certainly better than not using a password keeper at all, you can’t easily access your passwords and other login info outside of the browser or share login info with others you trust.

What about iCloud Keychain?

Through iCloud Keychain, you can access your Safari website usernames and passwords, credit card information and Wi-Fi network information from your Mac and iOS devices. This cloud storage option is great if you live in Apple’s world. But if you venture outside the Apple operating system and have a Windows or Android device or use the Google Chrome or Firefox browser, iCloud Keychain comes up short.

David Gewirtz contributed to this story.

More computer advice

Technologies

Anthropic warns investors of AI’s ‘existential risk to humanity’ in IPO prospectus, reports say

Anthropic’s IPO filing dedicates 80 pages to the risks of AI, nearly double the 48 pages it spends discussing its business plans, according to Reuters.

Your Privacy

On this service, we and our vendors use cookies and other tools (“Cookies”) to store and access information on your device, such as device identifiers, IP address, and your browser type. Your data may be used to save and communicate your privacy choices; ensure security, prevent fraud, and debug our products and services; personalize advertising and content; for advertising and content measurement; to conduct audience research and services development; so we can improve our services and develop new ones; to match and combine offline data with your online activity; and for social features. We may share this data with select vendors with your consent. You can adjust your choices any time through the “Cookie Preferences” link in the footer of relevant Versant sites or in-app settings.

We will also use other Cookies that are essential or related to our services, including for security and fraud prevention. To learn more about some of our vendors, see the IAB and Google Vendors under each purpose. Visit our Cookie Notice and Privacy Policy to learn more.

These Cookies and SDKs are required for Service functionality, including security and fraud prevention, and to enable any purchasing capabilities. You can set your browser to block these tracking technologies, but some parts of the site may not function properly.

The choices you make regarding the purposes and entities listed in this notice are saved and made available to those entities in the form of digital signals (such as a string of characters). This is necessary in order to enable both this service and those entities to respect such choices.

Your data can be used to monitor for and prevent unusual and possibly fraudulent activity (for example, regarding advertising, ad clicks by bots), and ensure systems and processes work properly and securely. It can also be used to correct any problems you, the publisher or the advertiser may encounter in the delivery of content and ads and in your interaction with them.

Certain information (like an IP address or device capabilities) is used to ensure the technical compatibility of the content or advertising, and to facilitate the transmission of the content or ad to your device.

Cookies, device or similar online identifiers (e.g. login-based identifiers, randomly assigned identifiers, network based identifiers) together with other information (e.g. browser type and information, language, screen size, supported technologies etc.) can be stored or read on your device to recognise it each time it connects to an app or to a website, for one or several of the purposes presented here.

– Use limited data to select advertising 791 partners can use this purpose Advertising presented to you on this service can be based on limited data, such as the website or app you are using, your non-precise location, your device type or which content you are (or have been) interacting with (for example, to limit the number of times an ad is presented to you).

– Create profiles for personalised advertising 637 partners can use this purpose Information about your activity on this service (such as forms you submit, content you look at) can be stored and combined with other information about you (for example, information from your previous activity on this service and other websites or apps) or similar users. This is then used to build or improve a profile about you (that might include possible interests and personal aspects). Your profile can be used (also later) to present advertising that appears more relevant based on your possible interests by this and other entities.

– Use profiles to select personalised advertising 640 partners can use this purpose Advertising presented to you on this service can be based on your advertising profiles, which can reflect your activity on this service or other websites or apps (like the forms you submit, content you look at), possible interests and personal aspects.

– Create profiles to personalise content 261 partners can use this purpose Information about your activity on this service (for instance, forms you submit, non-advertising content you look at) can be stored and combined with other information about you (such as your previous activity on this service or other websites or apps) or similar users. This is then used to build or improve a profile about you (which might for example include possible interests and personal aspects). Your profile can be used (also later) to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests.

– Use profiles to select personalised content 234 partners can use this purpose Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services (for instance, the forms you submit, content you look at), possible interests and personal aspects. This can for example be used to adapt the order in which content is shown to you, so that it is even easier for you to find (non-advertising) content that matches your interests.

– Measure advertising performance 916 partners can use this purpose Information regarding which advertising is presented to you and how you interact with it can be used to determine how well an advert has worked for you or other users and whether the goals of the advertising were reached. For instance, whether you saw an ad, whether you clicked on it, whether it led you to buy a product or visit a website, etc. This is very helpful to understand the relevance of advertising campaigns.

– Measure content performance 405 partners can use this purpose Information regarding which content is presented to you and how you interact with it can be used to determine whether the (non-advertising) content e.g. reached its intended audience and matched your interests. For instance, whether you read an article, watch a video, listen to a podcast or look at a product description, how long you spent on this service and the web pages you visit etc. This is very helpful to understand the relevance of (non-advertising) content that is shown to you.

– Understand audiences through statistics or combinations of data from different sources 579 partners can use this purpose Reports can be generated based on the combination of data sets (like user profiles, statistics, market research, analytics data) regarding your interactions and those of other users with advertising or (non-advertising) content to identify common characteristics (for instance, to determine which target audiences are more receptive to an ad campaign or to certain contents).

– Develop and improve services 688 partners can use this purpose Information about your activity on this service, such as your interaction with ads or content, can be very helpful to improve products and services and to build new products and services based on user interactions, the type of audience, etc. This specific purpose does not include the development or improvement of user profiles and identifiers.

– Use limited data to select content 180 partners can use this purpose Content presented to you on this service can be based on limited data, such as the website or app you are using, your non-precise location, your device type, or which content you are (or have been) interacting with (for example, to limit the number of times a video or an article is presented to you).

These Cookies and SDKs are used to collect data about your browsing habits, use of the Services, your preferences, and your interaction with advertisements across platforms and devices for the purpose of delivering targeted advertising content, both on our Services and on third party sites. Third-party sites and services also use Targeting Cookies to deliver content, including advertisements relevant to your interests on the Services. If you reject these Cookies or SDKs, you will see less relevant advertising.

Data collected under this category through Cookies and SDKs can also be used to select and deliver personalized content, such as news articles and videos.

Technologies

U.S., Iran hold separate mediator talks as Mideast oil exports hit war-time high

Iranian and U.S. officials reportedly met separately with mediators Monday to push for a ceasefire, as Middle Eastern crude exports rebounded to war-time high.

Iranian and U.S. officials reportedly met separately with mediators Monday to push for a ceasefire.

Middle Eastern crude exports rebounded this month to around their highest level since the war began in February.

An outright export ban by Washington on diesel would keep roughly 1.2 million barrels a day at home, and risks overwhelming Gulf Coast storage, according to Kpler.

The building of the destroyed Shajareh Tayebeh primary school is pictured surrounded by rubble in Minab in Iran’s Hormozgan province on August 10, 2026. Six months on, a team of AFP journalists obtained rare access to the school which has remained largely in ruins, its collapsed walls and twisted steel now surrounded by portraits of the children killed as Iranian flags flutter above the rubble. Iran says the attack on the school involved two separate US Tomahawk missiles but neither the United States nor Israel has officially claimed responsibility for the strike. (Photo by ATTA KENARE / AFP via Getty Images) /

Atta Kenare | Afp | Getty Images

U.S. and Iranian officials have reportedly held separate indirect talks with mediators on Monday, reviving efforts to end seven months of war as Tehran presses for a response to a revised ceasefire framework and Middle East crude exports climb to their highest level since the conflict began.

Iranian Foreign Minister Abbas Araghchi met Qatari mediators in New York, where he remained after the United Nations General Assembly, and reportedly said he expects Washington’s reply by Tuesday. “We talked about ideas and how to find solutions to fulfil Iran’s conditions,” Araghchi said, adding that he planned to return to Tehran once a response arrives. “Whenever the Qataris have a response, they know how to get it to us.”

Iran’s proposal, first presented on the sidelines of last week’s General Assembly, calls for a four- to five-day U.S. timeline to release frozen Iranian funds, lift sanctions on Iranian oil and end the naval blockade of Iranian ports, with nuclear talks beginning within seven days. Tehran has tied any reopening of the Strait of Hormuz to those steps.

President Donald Trump had on Sunday called the plan “unacceptable” and rejected it, telling reporters Iran wants a swift deal because of the economic pressure it is under. Speaking at the White House Monday, Trump said U.S. officials had spoken separately with mediators but gave no further details, adding: “We’re going to win. It’s going to go pretty quickly.”

The diplomatic push comes as physical supply data shows the war’s toll on the oil market easing. Middle Eastern crude exports rebounded this month to around their highest level since the war began in February, Kpler data showed. “Middle East crude exports at just under 80% of pre-conflict levels,” the tracking firm said in a note on Monday.

The Strait of Hormuz itself remains far from normal. Kpler’s real-time tracking showed total clearance through the strait at 10,591 kilobarrels a day on Saturday, against a pre-war baseline of 17,133.

Technologies

Oil prices fall as crude exports recover at Saudi Arabia’s Red Sea ports

Saudi Arabia has restored flows through the pipeline to around 3.5 million barrels per day, according to media reports.

Your Privacy

Data collected under this category through Cookies and SDKs can also be used to select and deliver personalized content, such as news articles and videos.