The Beginner’s Guide to Password Managers

Learn why a password manager is essential for online security, how to pick one and quick setup tips to protect your accounts.

Date: 22/09/2025
Author: Brodie Rummery

Large-scale breaches continue to rise. Between April 2024 and April 2025, around 19 billion passwords were exposed, and about 94% of them were reused or duplicates (Cybernews). This highlights the danger of reusing passwords and why password managers are now an essential part of staying secure online.

In this post, we’ll explain in plain terms what a password manager does, why you should use one and how to get started. At its core, a password manager is a secure vault where you store all your passwords in one place. Many also include useful features, like checking if your password has been in a breach or autofilling logins into websites.

We’ll keep things simple and only cover the features that actually make you safer, so you don’t need to worry about the noise. If you’re new to the idea, you might be thinking: “All my passwords in one place? That doesn’t sound safe!” Stick with us, we’ll explain why security experts recommend them, how to pick the right one, and how to get set up.

• Why password managers matter: Reusing passwords is one of the biggest risks, and using a manager helps protect you from common attacks like credential stuffing.
• How they help: You can store and autofill strong, unique passwords, check for weak or reused ones, and keep everything organized in one secure vault.
• Choosing the right one: The best manager is the one you actually use. Bitwarden, Apple Passwords, and 1Password are all safe and reliable options.
• Getting started securely: Create a long, memorable master password and turn on MFA for extra protection

A password manager is a secure vault that stores all your passwords. Alongside storage, it can:

• Generate strong passwords for you
• Autofill them into websites and apps
• Detect weak, reused, or compromised passwords (CISA)

Password managers come in different forms: mobile apps, desktop apps, and browser extensions. This means you can always access your passwords when you need them.

Popular examples include Bitwarden, Apple Passwords (iCloud Keychain) and 1Password. Many also offer:

• Secure notes for storing recovery keys or sensitive codes
• Secure document storage for identity documents like passport or license scans

Why You Should Use a Password Manager

So, why use one? As we mentioned earlier, 94% of 19 billion leaked passwords from April 2024 to April 2025 were reused or duplicated (Cybernews). And really, who could remember a unique password for every single account without help?

This is where password managers shine. One of the most common hacking techniques is called credential stuffing. Attackers take a password exposed in one breach and try it across your other accounts (Verizon DBIR). If you reuse passwords, you’re at risk.

With a password manager, you can use long, unique passwords without worrying about remembering them. The tool stores them securely and autofills them when needed.

💡 Pro tip: Use passphrases instead of hard-to-read passwords with random characters. They’re easier to type, easier to remember and just as strong. For example, BluePizzaGarden is far more usable than xD9!p@Q$z.

How to Choose the Right Password Manager

There are entire websites built on comparing features, but here’s the simple truth: the best password manager is the one you actually use. As long as you pick a reputable option, set up a strong master password and turn on MFA (multi-factor authentication), you’re doing great.

If you’re an advanced user and want to dig deeper, compare features like:

• Secure sharing
• Password health reports
• Breach monitoring
• Passkey support
• Emergency access

For this guide, here are my simple recommendations:

1. Bitwarden (Cross-platform, open source)

• My #1 recommendation
• Open source and trusted by enterprises
• Best free feature set of any password manager
• Paid version available for only $10 per year

2. Apple Passwords, aka iCloud Keychain

• A convenient and strong choice if you’re fully in the Apple ecosystem
• Built into iPhones, iPads, and Macs
• Seamless and likely already in use without you realizing

3. 1Password (Cross-platform, paid)

• Best paid choice, no free tier available
• Extra features like secure sharing, password health reports, emergency access, breach monitoring

Getting Started With Your Password Manager

Once you’ve chosen a manager, it’s time to get set up. Each tool has its own instructions, but here are some universal rules to follow:

1. Create a strong master passphrase. Aim for 12+ characters, using random words. Example: Margin-Onion-Kindness.
2. Remember it yourself. You can use Face ID or fingerprints later, but memorising the master password is essential.
3. Turn on MFA. This adds another layer of protection. You’ll usually only need it when signing in on new devices, not every time you unlock your vault.

💡 Pro tip 2: Ensure your password manager is a part of your sign-up workflow to new websites, so you can easily generate and store strong passwords for later.

Follow these basics, and you’ll be set up securely from day one.

Password managers take the load off remembering unique logins. By using one, you protect yourself from password reuse, breaches and common hacking attacks like credential stuffing.

To recap:

• Pick a reputable password manager that works across your devices.
• Create a long, memorable master passphrase (password for your password manager) and turn on MFA for extra protection.
• Run a vault health check and replace any reused or weak passwords right away.

With these steps, you’ll have a strong foundation for staying safe online without the headache of managing passwords yourself. I hope this guide has been useful.

• CISA resource: Use a Password Manager (training)
• Verizon 2024 Data Breach Investigations Report (DBIR)
• Troy Hunt – blog posts on password managers / Have I Been Pwned
• Cybernews analysis of leaked passwords (Apr 2024–Apr 2025)
• Security.org / industry reports on password manager adoption
• BusinessWire survey on password manager behaviour (2024)
• ACSC Passphrases