Every password manager comparison opens with the same list: zero-knowledge encryption, AES-256, open-source audits. All of them have those. None of them is the reason people abandon one and crawl back to a notes app.
What actually decides whether a password manager survives contact with a household is duller and more awkward: what happens when you are locked out, when your partner needs the Wi-Fi password while you are on a plane, when a parent dies and nobody can reach the bank, and what it costs to leave. Six options below, judged mostly on those.
The Short Version
- The free options are genuinely good now. Bitwarden’s free tier is unlimited, Proton Pass’s free tier is unlimited, and if your household is entirely Apple you already own a competent one.
- Recovery is the real differentiator. Zero-knowledge encryption means the vendor cannot reset your password. Every provider solves that differently, and some barely solve it at all.
- Nobody plans for death and everybody should. A vault nobody else can open turns a bereavement into a forensic exercise. Only some of these have a usable answer.
- Export is the exit cost. Check it before you subscribe, not after. A tool that exports clean CSV or JSON is a tool you can leave.
- Price is the least interesting variable. The spread between free and about $48 a year is small next to the cost of abandoning the habit in month three.
The Question Nobody Asks Until It Is Too Late
Zero-knowledge architecture is the thing every vendor advertises and the thing that causes every disaster. If the provider cannot read your vault, the provider cannot let you back into it either. Your master password is not recoverable by support, because support does not have it.
That leaves each product to invent its own escape hatch, and the designs differ more than the marketing does. Some issue a long recovery key at signup — a sheet of characters you are expected to print and keep, which most people lose immediately. Some let a trusted contact request emergency access after a waiting period. Some lean on your device: biometrics on a phone you are already signed into, which works beautifully until the phone goes in the sea.
Before you move a few hundred logins into any of these, work out the answer to three questions. How do I get back in if I forget the master password? How does somebody I trust get in if I am not available? And how do I get everything out again? If a product cannot answer all three, the encryption quality is beside the point.
The Six, at a Glance
| Tool | Free tier | Paid | Best for |
|---|---|---|---|
| Bitwarden | Unlimited, all devices | $1.65/mo, billed $19.80/yr | Almost everyone |
| 1Password | None, 14-day trial | $3.99/mo, $5.99 families | Households and shared vaults |
| Proton Pass | Unlimited logins and devices | $2.99/mo, billed $35.88/yr | People already in Proton |
| Apple Passwords | Free, built in | — | All-Apple households |
| Google Password Manager | Free, built in | — | Chrome and Android users |
| KeePassXC | Free, open source | — | People who want no cloud at all |
Prices are USD on annual billing, taken from each vendor’s own pricing page in October 2026. Promotional first-year rates are common and are noted below where they apply.
The Six, in Detail
1. Bitwarden
The default recommendation, and it has earned the position by being the only one whose free tier is not a demo. Unlimited passwords, unlimited devices, apps on everything, and the client code is open source and independently audited.
Premium at $19.80 a year adds hardware security key support, encrypted file attachments, a built-in authenticator and vault health reports. Families is $47.88 a year for six people with a shared collection. There is also a self-hosting option, which is the serious answer for anyone who objects to their vault living on somebody else’s infrastructure.
Where it falls down: the interface is functional rather than pleasant, and it shows most on mobile. Autofill is reliable but not telepathic. If you are moving a non-technical relative onto a password manager, the extra polish elsewhere may be worth paying for.
2. 1Password
The one people pay for voluntarily. Individual is $3.99 a month billed yearly, Families $5.99 for five people, with promotional first-year rates of $2.99 and $4.49 for new customers signing up directly. There is no free tier at all, only a 14-day trial.
Two design decisions earn the money. The Secret Key — a second, device-held credential combined with your master password — means a stolen database is not brute-forceable with the password alone, and it is the clearest recovery story here: family organisers can recover other members’ accounts. Shared vaults are the other one. Separating “our household logins” from “my logins” is a structure families actually use, rather than one they are told to use.
Where it falls down: no free tier means you cannot leave a reluctant family member parked on one indefinitely. The Secret Key is another thing to lose. And at roughly $48 a year for one person it is the most expensive mainstream option.
3. Proton Pass
The newest serious entrant, from the Swiss company behind Proton Mail. The free plan is unusually complete: unlimited logins, notes and cards, unlimited devices, passkeys, a password generator and ten hide-my-email aliases.
Those aliases are the genuine differentiator. Signing up to things with a generated address that forwards to your real inbox means a breach at some retailer leaks an address you can delete rather than the one your bank uses. Pass Plus is $2.99 a month billed as $35.88 a year and lifts the alias cap; Pass Family is $4.99 a month for six. If you already pay for Proton Unlimited at $9.99 a month, Pass is included and the decision makes itself.
Where it falls down: it is young, and the ecosystem pull is real — the value proposition improves considerably if you also use Proton Mail, which is a bigger migration than swapping password managers. Standalone, it is good rather than obviously better than Bitwarden.
4. Apple Passwords
What was buried in Settings for a decade is now a standalone app, and promoting it changed its status from a thing people did not know they had to a thing they use. Free, syncs across Apple devices through iCloud Keychain, handles passkeys and verification codes, and the autofill is the smoothest here because it is built into the operating system rather than negotiating with it.
Shared groups let a household pool logins without a subscription. For a family entirely on iPhones, this is the path of least resistance, and the path of least resistance is the one people stay on.
Where it falls down: it assumes you never leave. There is a Windows app via iCloud, and it is a compromise; on Android there is nothing. The moment one person in the household switches phone platform, the shared setup stops working, and that is a bad moment to discover your vault has no door on that side.
5. Google Password Manager
The one most people are already using without having chosen it. Built into Chrome and Android, free, no setup, and it will warn you about reused and breached passwords if you let it check.
Its real merit is coverage by default. Someone who has been clicking “save password” in Chrome for eight years has a more complete record of their accounts than most people who deliberately set up a password manager last month. That list is worth exporting and auditing even if you move somewhere else.
Where it falls down: it is tied to your Google account, which is also the account it is protecting — lose access to that and you lose both at once. Sharing is weak, secure notes and documents are not really its job, and outside Chrome the experience degrades quickly. Treat it as a floor rather than a destination.
6. KeePassXC
Free, open source, and philosophically the opposite of everything above. Your vault is a file on your disk. There is no account, no server, no subscription and no company that can be breached, acquired or shut down.
For anyone who wants their passwords to depend on nobody, this is the answer, and it has been for years. Browser integration exists, mobile clients exist from third parties, and sync is whatever you arrange yourself — usually the same cloud drive you already use, which quietly reintroduces a third party, just one you picked.
Where it falls down: everything convenient is your problem. Sync, backup, mobile access and sharing are all assembly required, and a corrupted or unbacked-up database file is simply gone. The failure mode of the cloud options is a company behaving badly; the failure mode here is you forgetting to copy a file.
What Actually Makes People Switch
Almost nobody moves password manager because of a feature comparison. In practice there are four triggers, and they are worth knowing because they tell you what to test during a trial.
- Autofill failed at a checkout. Three times in a week and the habit breaks. Test on the sites you actually use, especially banking, which is where autofill is most often deliberately obstructed.
- A household member could not get in. Shared vaults either exist and work, or everyone reverts to messaging each other passwords.
- A price rise arrived. Bitwarden’s Premium tier roughly doubled in early 2026 and still costs under $20 a year, which tells you how little the absolute numbers matter and how much the surprise does.
- A platform change. One person moves from iPhone to Android and an ecosystem-bound setup stops being a shared setup.
How to Choose
- Count the platforms in your household, not your devices. One Android phone in an otherwise Apple family rules out the built-in option as a shared system.
- Read the recovery process before you migrate. Not the marketing page — the support article describing what happens when you forget the master password. If it ends with “your data cannot be recovered”, decide now whether you accept that.
- Set up emergency access on day one. Whatever the product calls it. This is the single most neglected setting in the category and the one that matters most to the people you leave behind.
- Export once, immediately. Confirm you can get a readable file out. Delete it securely afterwards. You have now proven the exit exists.
- Import your browser’s saved passwords first. That is your real account inventory, and it is longer and uglier than you think.
- Turn on breach monitoring and then act on it. A list of compromised logins you never fix is worse than not knowing, because it feels like you did something.
Frequently Asked Questions
Is it safe to keep every password in one place?
Safer than the alternative, which is reuse. The realistic threat to most people is not a vault being cracked but one leaked password from a breached forum unlocking their email, and from there everything else. A manager removes that by making every password different and none of them memorable. The concentration risk is real but it is a smaller risk than the one it replaces.
What happens to my accounts if I die?
Whatever you configured in advance, and nothing otherwise. Most paid tiers offer some form of emergency access, where a nominated contact can request entry and receives it after a delay you set unless you decline. Set it up while it is boring. Families routinely discover that the only person who could reach the accounts is the person who is gone.
Are passkeys making password managers obsolete?
The opposite, so far. Passkeys need somewhere to live and something to sync them between devices, which is exactly what a password manager is. All six of these handle passkeys now. The realistic future is a long middle period where you hold passkeys for the handful of sites that support them properly and passwords for the several hundred that do not.
Should I pay when the free tiers are this good?
Only for a specific reason. Hardware key support, emergency access, shared family vaults and email aliasing are the four that justify it. If none of those applies to you, Bitwarden or Proton Pass free is not a compromise, and the money is better spent on a hardware key.
How do I move everything out if I change my mind?
Every tool here exports to CSV or JSON, and every tool here imports from the others, so the migration itself takes minutes. The friction is elsewhere: an exported file is plain text containing all your passwords, so move it once, import it, and delete it properly rather than leaving it in Downloads for two years.
Leave a Reply