How to Use a Password Manager (Without Losing Your Mind)
"I should use a password manager" is right up there with "I should exercise more" on the list of things people know they should do but keep putting off. Let's fix that today.
A password manager is genuinely one of the best cybersecurity decisions you can make. It takes about 15 minutes to get started, and after that, your password hygiene improves dramatically with zero effort.
Here's how.
Step 1: Choose your password manager
Good options for individuals and small businesses:
- Bitwarden (free, open-source, excellent) — great starting point
- 1Password (paid, very polished, excellent for teams)
- Dashlane (good free tier, clean interface)
- Built-in browser password managers (Chrome, Safari, Edge) are better than nothing but less secure than dedicated apps
For this guide, let's use Bitwarden — it's free, trustworthy, and works on all devices.
Step 2: Create your account and master password
Go to bitwarden.com and create a free account. You'll need to create one strong master password — this is the only password you'll ever need to memorise.
Make it a passphrase: four random words, a number, and a symbol. Write it down once on paper and store it somewhere safe (a physical notebook in a secure location, not a sticky note on your monitor). This is the one password that must never be forgotten.
Step 3: Install the browser extension
Bitwarden has a browser extension for Chrome, Firefox, Safari, and Edge. Install it. This is what allows the manager to autofill passwords when you visit websites. It's the feature that makes this all worth it.
Step 4: Import existing passwords (optional)
If your browser has saved passwords, most password managers let you import them in bulk. Check the import/export settings in your browser and the import section of Bitwarden.
Step 5: Update accounts as you go
Don't try to update every account at once — that's overwhelming. Instead, use the rule: "every time I log into something, generate a new strong password for it." Within a few weeks, your most-used accounts will all have unique, strong passwords.
To generate a password in Bitwarden: click the extension icon, choose "Generator," pick your settings (16–20 characters, include numbers and symbols), copy the generated password, and save it to your vault.
Step 6: Enable MFA on the password manager itself
Your password manager is a high-value target. Enable two-factor authentication on your Bitwarden account so that even if someone gets your master password, they still can't access your vault.
For small businesses
Consider Bitwarden Teams or 1Password Teams. These allow you to share credentials securely between staff (no more emailing passwords) and revoke access when someone leaves.
The payoff
Once it's set up, a password manager actually makes logging in faster — the extension fills in your credentials automatically. Better security AND less friction. A rare win-win.
Think you can spot a phish?
Put your knowledge to the test with the Phishbate interactive quiz. It only takes a few minutes.
Take the Quiz →