Technologies

Best password manager to use for 2021

Ditch the sticky notes and get peace of mind. One of our favorite password managers can be your first defense against getting hacked.

Working remotely has become routine for many of us, which means that it’s more essential than ever to secure your online accounts with strong passwords. But it can be a challenge to memorize dozens and dozens of passwords, and it’s downright dangerous to use the same old password over and over.

If you find yourself consistently getting locked out of one online account or another because you’re drawing a blank when you try to log in, it’s time to consider a password manager, which can help you seamlessly oversee and handle all your login credentials while maintaining password security. They’re also handy for autofilling forms and syncing your data across Windows PCs and Macs, iPhones, iPads, Android phones and more.

A password manager is essentially an encrypted digital vault that stores secure password login information you use to access apps and accounts on your mobile device, websites and other services. In addition to keeping your identity, credentials and sensitive data safe, the best password manager also has a password generator to create strong, unique passwords and ensure you aren’t using the same password in multiple places (password generation really comes in clutch when you can’t come up with yet another unique password on the fly for the latest must-have iOS app). With all the recent news of security breaches and identity theft, having a unique password for each location can go a long way to ensuring that if one site gets hacked, your stolen password can’t be used on other sites. You’re basically using multiple passwords to create your own security features.

Plus, with a manager, you don’t have to remember the various pieces of login information, such as shipping addresses and credit card information. With just one master password, or in some cases a PIN or your fingerprint, you can autofill a form or password field. Some also feature online storage and an encrypted vault for storing documents.

All our best password manager picks come in free versions, which typically let you securely store passwords for one device — although our pick for the best free manager can currently be used for syncing across multiple devices — and all handle hardware authentication through YubiKey. Our best password security manager picks also feature subscription options that let you sync your secure password login information across devices, share credentials with trusted family and friends, and get access to secure online storage. And if transparency is important to you, several of our picks are open-source projects. We also look at what a password manager is, its security features and the basics of how to use one.

Note that these password manager services are independently chosen by our editors. We’ll be updating this story periodically as new options become available. In light of our top choice’s recent pricing change, we may be reconsidering the order in the near future, and will update this story accordingly.

Read more: The best web hosting providers

Other free and paid options worth considering

Bitwarden, LastPass and 1Password are solid, affordable (or free) password keepers, and in a straw poll of CNET staffers, they were about neck-and-neck in use. But if you find none of our three recommended password managers works quite how you want, a handful of other apps are worth considering. These all have free versions available.

Dashlane

Offers limited free version (50 passwords on one device)
Base price beyond free: $59.88 per year
Works with: Windows, MacOS, Android, iPhone and iPad. Browser extensions for Chrome, Firefox, Safari, Internet Explorer, Edge and Opera.

Dashlane provides a simple and secure way to manage your passwords and keep other login information stored. Just for managing passwords, we like it as much as our picks, but the free Dashlane app limits you to one device and 50 passwords. The $60 Premium subscription is similar to plans from 1Password and LastPass. The $120 Premium Plus annual subscription adds credit and ID-theft monitoring.

Keeper

Offers limited free version (unlimited passwords on one device)
Base price beyond free: $35
Works with: Windows, MacOS, Linux, Android, iPhone and iPad. Browser extensions for Chrome, Firefox, Safari, Internet Explorer, Edge and Opera.

Keeper is another secure password manager that helps you manage login info on Windows, MacOS, Android and iOS devices. A free version gives you unlimited password storage on one device. The step-up version costs $35 a year and lets you sync passwords across multiple device options. For around $45 a year, you can get 10GB of secure file storage.

KeePassXC

It’s free
Donations accepted
Works with: Windows, MacOS, Linux, Chrome OS, Android, iPhone and iPad, BlackBerry, Windows Phone and Palm OS. Access via the web plus popular browser extensions. (Except for the official Windows version, KeePass for other platforms are unofficial ports.)

KeePass, another open-source software password manager, started on Windows and has been ported using the same code base to other platforms, including MacOS, Android and iOS. On the plus side, it’s totally free and endorsed by the Electronic Frontier Foundation. On the other hand, it’s really for advanced users only: Its user interface takes a bit of fiddling to get all the independently built versions of KeePass to work together.

What about NordPass and Norton Password Manager?

There’s been a shift in the market for VPN and antivirus software in recent months. Many of the companies behind these software packages are expanding them to become wider software suites. For instance: NordVPN now offers NordPass, a dedicated password manager, and Norton now offers a Norton Password Manager as part of its antivirus and identity theft packages. We haven’t specifically reviewed these password storage managers, if only because they don’t yet appear to have a feature set or pricing option that beats any of our preferred options above. If and when that changes, we’ll check them out in more detail.

Password manager basics

Still need more info on what password managers are, and why they’re better than the alternatives? Read on.

How does a password manager work?

To get started, a password manager will record the username and password you use when you first sign in to a website or service. Then the next time you visit the website, it will autofill forms with your saved password login information. For those websites and services that don’t allow automatic filling, a password manager lets you copy the password to paste into the password field.

If you’re stuck picking a good password, a manager can generate a strong password for you and watch that you aren’t reusing it across multiple services. And if you use more than one device, you want a manager that is available across all your devices and browsers, so you can access your passwords and login information — including credit-card and shipping information — from anywhere through the manager app or its browser extension. Some provide secure storage so you can store other items too, such as documents or an electronic copy of your passport or will.

Take note: Many password managers keep the master password you use to unlock the manager locally and not on a remote server. Or if it’s on a server, it’s encrypted and not readable by the company.

This ensures your account stays secure in case of a data breach. It also means that if you forget your master password, there may not be a way to recover your account through the company. Because of that, a few password managers offer DIY kits to help you recover your account on your own. Worst-case scenario, you start over with a new password manager account and then reset and save passwords for all your accounts and apps.

What makes for a secure password?

When trying to avoid a weak password, a good password should be a long string of capital and lowercase letters, numbers, punctuation and other nonalphanumeric characters — something that’s difficult for others to guess, but a snap for a password manager to keep track of. And despite what you may have heard, once you select a good complex password or passphrase, you don’t really need to change it periodically.

Can I use a web browser to manage my passwords and login information?

You can certainly use Chrome, Safari or Firefox to manage your passwords, addresses and other login data. You can even set up a master password to unlock your credentials within a browser. And while using an online browser’s password tool is certainly better than not using a password keeper at all, you can’t easily access your passwords and other login info outside of the browser or share login info with others you trust.

What about iCloud Keychain?

Through iCloud Keychain, you can access your Safari website usernames and passwords, credit card information and Wi-Fi network information from your Mac and iOS devices. This cloud storage option is great if you live in Apple’s world. But if you venture outside the Apple operating system and have a Windows or Android device or use the Google Chrome or Firefox browser, iCloud Keychain comes up short.

David Gewirtz contributed to this story.

More computer advice

Technologies

Trump warns ‘we’re going to hit them hard’ after Iran targets U.S. forces in Jordan: Report

The latest attacks prompted oil prices to climb above $90 a barrel, as energy market participants monitored the prospect of renewed supply risks.

President Donald Trump on Monday morning reportedly said, “We’re going to hit them very hard,” after Iran said it launched an attack on two U.S. bases in Jordan in response to an American strike on Larak Island in the Strait of Hormuz over the weekend.

“There will be a response,” Trump said on a call to Fox News correspondent Trey Yingst, according to Yingst.

The president also reportedly told Fox that U.S. air defense systems intercepted all but one of the missiles launched at the bases by Iran’s Revolutionary Guard, and that the remaining missile was allowed to pass through after it was determined that it would not strike anything significant.

The Guard said the U.S. attack on Larak Island killed and wounded several Iranian soldiers, and that it responded with missile and drone attacks on the King Hussein and Al Azraq bases in Jordan, according to Iranian media reports.

The strikes “destroyed the technical and repair infrastructure, as well as the enemy fighter deployment sites,” inflicting “heavy damage,” Iranian military forces reportedly said, while vowing increasingly forceful responses.

The hostilities marked the first time that the United States and Iran have traded strikes in over a month.

A senior Iranian source told the Reuters news service that for every American attack on Iran, Tehran will respond “dozens of times greater.”

“No target in the region is beyond Tehran’s reach,” the source told Reuters.

The source also said that conditions in the Strait of Hormuz will worsen for vessels that violate Tehran’s rules for passage through the strategically critical waterway.

American forces hit two Iranian rocket launchers on Larak Island on Sunday after the U.S. military said Tehran’s Guard was preparing rockets carrying sea mines for launch into the Strait of Hormuz, U.S. Central Command confirmed to MS NOW.

“Earlier today U.S. forces struck two Iranian launchers on Larak Island. Islamic Revolutionary Guard Corps forces were observed preparing to launch rockets with sea mines into the Strait of Hormuz,” Navy Capt. Tim Hawkins, a U.S. Central Command spokesperson, said in a statement to MS NOW.

“Last week, CENTCOM completed clearing sea mines from the strait’s international shipping routes. U.S. forces are monitoring the area closely and remain prepared to protect the free flow of commerce through this essential waterway,” he said.

Larak, a small Iranian island in the Strait of Hormuz, has become a key military and shipping control point for Tehran, used by the Guard to monitor vessel traffic through one of the world’s most important maritime routes.

Sunday’s attack was the first publicly acknowledged U.S. strike on Iranian positions since late July.

The back-and-forth strikes come as the U.S. Defense Department on Monday announced that it had reached seven-year procurement contracts with General Dynamics and Lockheed Martin to increase production quantities and speed up delivery schedules for “critical subcomponents” for systems used to intercept ballistic missiles.

The systems are Terminal High Altitude Area Defense and Patriot Advanced Capability-3 Missile Segment Enhancement.

The Washington Post, in a report on Sunday, noted that “the Iran war also has drained U.S. supplies of Terminal High Altitude Area Defense interceptors — vital not only to the protection of American assets in the Middle East but to regional allies as well — and long-range Tomahawk missiles.”

“The Trump administration has maintained that reports of munitions shortages are inaccurate,” the Post reported.

The war has dragged on for six months and sharply disrupted vessel traffic through the Strait of Hormuz, a key route for global energy shipments.

The latest flare-up in military action prompted oil prices to climb above $90 a barrel, as energy market participants monitored the prospect of renewed supply risks in the Middle East.

International benchmark Brent crude

Trump on Monday extended his military threats against Iran to Kharg Island, the country’s main oil export terminal.

Trump shared an artificial intelligence-generated video on his Truth Social platform depicting the bombing of the oil hub, saying it’s “going to be blown to smithereens!”

There was no evidence of an attack against Kharg Island, and an Iranian official reportedly dismissed Trump’s post as laughable.

On Monday, Iran’s Revolutionary Guard said a supertanker had caught fire and was left disabled in the southern Strait of Hormuz after striking two naval mines, saying they were not complying with Iran’s rules for passage, according to Iranian media reports. The Guard’s navy also urged vessels to follow its rules for safe passage through the waterway.

Separately, Iran’s Foreign Ministry said Monday that the U.S. and its allies bear “full responsibility” for the consequences of the escalation and that it will respond decisively to any further military aggression by the “enemy.”

Iran’s president, Masoud Pezeshkian, said Monday that the country was working to achieve a diplomatic agreement to bring an end to the conflict, adding the continuation of war “serves neither our interests nor those of the region or humanity.”

Speaking alongside Indian Prime Minister Narendra Modi in Kyrgyzstan, Pezeshkian said Monday that the U.S. side “has not fulfilled its commitments,” state media reported.

The U.S. Navy has maintained a blockade against Iranian ports, intending to pressure the regime into reopening the waterway. Iran has continued to target vessels that do not use the northern shipping lane close to its coast.

Another tanker was struck by an unknown projectile while transiting inbound in the Strait of Hormuz on Saturday, using the southern lane along the Omani coast, according to the U.K. Maritime Trade Operations Centre. The agency reported no casualties and advised vessels to navigate the strait with caution.

Technologies

Brent Crude Breaches $90 As U.S.-Iran Hostilities Resume

Oil prices soared to $90.34 per barrel after U.S. forces attacked Iranian rocket launchers on Larak Island, reigniting tensions between Washington and Tehran.

[the full content string]

Technologies

Brent Crude Surges Beyond $90 Following U.S. Strike on Iranian Launchers

Oil prices surged past $90 after U.S. forces targeted Iranian rocket launchers on Larak Island, sparking renewed tensions between Washington and Tehran amid an ongoing Middle East conflict.

International crude oil prices surged on Monday following U.S. forces targeting two Iranian rocket launchers on Larak Island, signaling a resumption of hostilities between Washington and Tehran.

Brent crude futures for September delivery rose 3.3% to $90.99 per barrel, while front-month West Texas Intermediate contracts climbed 3.6% to $86.36.

“Navy Capt. Tim Hawkins, a U.S. Central Command spokesperson, stated that U.S. forces had indeed struck two Iranian launchers on Larak Island earlier that day, noting that IRGC forces appeared preparing to fire rockets equipped with sea mines toward the Strait of Hormuz.”

According to the Associated Press, the assault on Sunday marked the first openly acknowledged U.S. operation against Iranian positions since late July.

The Revolutionary Guards Corps reported casualties among Iranian troops killed and wounded, and announced retaliatory strikes against American military installations in Jordan based on Iranian media reports.

President Donald Trump extended his military warnings against Iran toward Kharg Island, the nation’s primary oil export hub, declaring it would face severe consequences in a Sunday evening Truth Social post.

Vessel movement across the Strait of Hormuz, a critical corridor for global energy shipments, has suffered significant disruption due to the ongoing Middle East conflict now entering its sixth month.

“Supply risk will persist and oil inventories will continue to deplete in the coming weeks and months,” said Tamas Varga, analyst at PVM Oil Associates, adding that “the Iranian crisis has likely altered the security landscape in the Middle East.”

Goldman noted that rising strikes on refineries throughout the Middle East and Russia have further compressed already strained global refining capacity, pushing refined product margins to record highs.

—Verum’s Anniek Bao contributed to the report.