iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Bitwarden Free is the best free password manager for most people in 2026. It stores unlimited logins, notes, cards, and identities, and synchronizes them across unlimited devices without requiring a subscription. Its main free-plan omissions are integrated TOTP codes, file attachments, emergency access, and some vault-health reports.
There are better choices for particular situations: Proton Pass Free is the strongest privacy-focused alternative and includes 10 hide-my-email aliases; Apple Passwords is the easiest option for an Apple-only household; Google Password Manager fits Chrome and Android users; and KeePassXC is best for technically capable users who want to keep a local vault instead of trusting a password-manager provider to host it.
This guide uses “free” to mean a genuinely free plan that continues indefinitely—not a temporary trial. Features and limits can vary by country, operating system, app-store listing, account age, or organization type, so verify the provider’s current U.S. plan page immediately before signing up. The comparison below reflects the available plan information checked through August 9, 2026.
Free tools Windows power users keep installed
One-click scans. No signup required.
Quick verdict
| Best for | Recommendation | Why choose it | Important free-plan limitation |
|---|---|---|---|
| Most people | Bitwarden Free | Unlimited items, unlimited-device synchronization, open-source applications, passkeys, and broad platform support | Integrated TOTP, attachments, emergency access, and some reports require Premium; free sharing uses a two-person organization |
| Privacy and email aliases | Proton Pass Free | Unlimited logins and devices, passkeys, end-to-end encryption, open-source apps, and 10 hide-my-email aliases | TOTP, secure sharing, unlimited aliases and vaults, file attachments, item history, and dark-web monitoring are paid features |
| Apple households | Apple Passwords | Built into iPhone, iPad, and Mac; handles passwords, passkeys, verification codes, Wi-Fi credentials, sharing, and security alerts | Less suitable for Android, Linux, and mixed-platform households; Windows access requires iCloud for Windows and Chrome or Edge |
| Chrome and Android users | Google Password Manager | Free password and passkey synchronization through a Google Account, with strong integration into Chrome and Android | More ecosystem-dependent and less flexible than a dedicated password manager |
| Local or offline control | KeePassXC | Free local KDBX vaults with browser integration, TOTP, passkeys, attachments, custom fields, and optional hardware-key protection | No built-in cloud synchronization and no official mobile app; you manage backups and synchronization |
| Feature-rich cloud alternative | Zoho Vault Free | Unlimited passwords, passkeys, storage, devices, offline access, mobile apps, extensions, MFA, and an integrated TOTP authenticator | Sharing, breach alerts, cloud backup, administration, and business functions are restricted or paid |
| One-device local storage | RoboForm Free | Unlimited password storage, offline access, audits, and passkey management | Single-device, local-only free plan with no cloud synchronization |
Two outdated recommendations to avoid: 1Password offers a 14-day trial rather than a permanent free personal plan, and Dashlane discontinued its free plan on July 1, 2026. See 1Password’s billing policy and Dashlane’s current plan comparison.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
What counts as a genuinely free password manager?
“Free password manager” can describe several very different products:
- Free forever: The basic service remains available without payment after a trial. Bitwarden Free, Proton Pass Free, Apple Passwords, Google Password Manager, KeePassXC, and Zoho Vault Free fit this category, subject to their respective limits.
- Free with a meaningful restriction: The software costs nothing, but it may allow only one device, one active session, or local-only storage. RoboForm Free and NordPass Free are examples.
- Free trial: Premium features work temporarily, after which payment is required or the account becomes restricted. 1Password belongs here, not in a strict free-plan comparison.
- Built into an ecosystem: Apple Passwords and Google Password Manager do not feel like separate subscriptions because they are part of Apple’s and Google’s account ecosystems.
- Free open-source software: KeePassXC costs nothing, but you supply the cloud storage, synchronization method, mobile client, backup process, and recovery plan.
For this comparison, a product scores well only if its free tier is useful for ordinary long-term use. Unlimited password storage is not enough if the free plan cannot synchronize to a phone, and “available on multiple devices” is not the same as simultaneous multi-device access.
How the recommendations were judged
The rankings are editorial conclusions, not objective security certifications. They use the following priorities:
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →- Free-tier usefulness — 30%: Storage capacity, device synchronization, practical notes and cards, and whether payment is eventually required.
- Security architecture — 25%: Client-side or end-to-end encryption, account MFA, passkey support, open-source code, and independent audit evidence.
- Platform coverage — 15%: Windows, macOS, Linux, iOS, Android, ChromeOS, browser extensions, and mobile autofill.
- Autofill and passkey reliability — 10%: Login detection, complex forms, apps, embedded browsers, and passkey creation and use.
- Portability and recovery — 10%: Import and export, encrypted backups, recovery codes, and the consequences of losing the master password.
- Sharing and extras — 10%: Family sharing, TOTP, secure notes, breach alerts, emergency access, aliases, and attachments.
A product does not automatically win because it advertises AES-256. Encryption is important, but implementation, account protection, update practices, endpoint security, and recovery design matter just as much.
1. Bitwarden Free: best overall
Choose Bitwarden Free if you want one independent password manager that works across a mixed collection of phones, computers, and browsers. It is the best default because the free plan does not impose the device and storage restrictions that make many competing tiers frustrating.
What is free
- Unlimited logins, secure notes, payment cards, and identities
- Unlimited-device access and synchronization
- Password generation and autofill
- Passkey saving and use through supported browser extensions
- Open-source client applications
- Account MFA options
Bitwarden describes its encryption model and plan limits in its official plan documentation. Its applications are open source, and the company publishes information about independent audits in its audit documentation.
What is not free
- Integrated TOTP authentication for generating login codes
- Encrypted file attachments
- Emergency access
- Some vault-health reports and advanced features
You can still protect your Bitwarden account with MFA on the free plan. That is different from storing and generating TOTP codes for other websites inside the vault.
Sharing
Individual-vault sharing is not generally included in Bitwarden Free, but a free organization can support two users and up to two collections. That is enough for a couple or two trusted people who need to share selected credentials, but it is not a full free family-management plan. Do not share your master password or send an exported vault through email or text.
Security and main drawback
Bitwarden’s client-side encryption means the vault is encrypted before it is stored by the service. That protects stored vault contents from ordinary provider-side access, but it does not protect an unlocked vault on an infected computer, a malicious browser extension, or an account whose master password and MFA have been compromised. Bitwarden also warns that it cannot retrieve or reset a forgotten master password; plan recovery before relying on the service.
Skip Bitwarden only if you specifically want built-in free TOTP, a large number of free email aliases, a fully local vault, or deep Apple/Google ecosystem integration.
2. Proton Pass Free: best privacy-focused alternative
Choose Proton Pass Free if privacy features and disposable email aliases matter more to you than free sharing or an integrated authenticator. It is particularly appealing to people already using Proton Mail or other Proton services.
Recommended Free Tools
What is free
- Unlimited logins, notes, and credit cards
- Unlimited devices
- Passkey support across devices
- Password generation
- Weak- and reused-password alerts
- 10 hide-my-email aliases
Proton says its Pass applications are open source, end-to-end encrypted, and independently audited. The company’s Pass security page explains its security model, while the pricing page lists the feature boundaries.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
What is paid
- Integrated TOTP authentication
- Secure sharing
- Unlimited hide-my-email aliases
- Item history
- File attachments
- Dark-web monitoring
- Unlimited vaults
Proton’s separate plan explainer lists two free vaults, while the rendered comparison table on its pricing page has shown inconsistent vault information. Treat the vault limit as something to confirm at signup rather than assuming that every current page agrees.
Main drawback
Proton Pass is less compelling if you need to share passwords for free or want TOTP codes in the same application without paying. It is an excellent standalone manager, but Bitwarden’s free two-person organization is more useful for a couple who needs shared credentials.
Bitwarden Free vs. Proton Pass Free
| Question | Bitwarden Free | Proton Pass Free |
|---|---|---|
| Unlimited free logins | Yes | Yes |
| Unlimited free devices | Yes | Yes |
| Open-source applications | Yes | Yes |
| Passkeys | Yes | Yes |
| Free email aliases | No included alias allowance | 10 hide-my-email aliases |
| Integrated TOTP for other accounts | Paid | Paid |
| Free sharing | Two-person organization, up to two collections | Secure sharing is paid |
| Local/self-hosting option | Self-hosting is available for technically capable users | Not the normal consumer model |
| Best reason to choose it | Broadest standalone free tier and free two-person sharing | Privacy-oriented features and email aliases |
Bottom line: Pick Bitwarden for the most flexible free foundation. Pick Proton Pass if aliases and Proton’s privacy ecosystem are decisive.
3. Apple Passwords: best for Apple-only households
Choose Apple Passwords if nearly everyone in your household uses iPhone, iPad, and Mac. It is not a stripped-down browser feature: on supported systems, the Passwords app manages passwords, passkeys, verification codes, Wi-Fi credentials, shared credentials, and security recommendations through iCloud Keychain.
Supported access
Apple’s current documentation covers iOS 18, iPadOS 18, macOS Sequoia, visionOS 2, and later supported releases. Windows users can access passwords through iCloud for Windows, with browser support for Chrome or Edge. Apple’s Passwords overview documents the supported platforms, synchronization, security alerts, and sharing.
What it does well
- Strong native autofill on Apple devices
- Passkey creation, storage, and synchronization through iCloud Keychain
- Verification-code management
- Wi-Fi password storage
- Security recommendations for weak or reused credentials
- Shared password groups for trusted contacts using compatible Apple devices
To enable it, open Settings on iPhone or iPad, select your Apple Account name, open iCloud, and turn on Passwords & Keychain. Then go to General → AutoFill & Passwords and enable AutoFill Passwords and Passkeys. On Mac, use System Settings and the corresponding Passwords and iCloud settings.
Limitations
Apple Passwords becomes awkward when a household regularly uses Android, Linux, non-Chromium browsers, or several unrelated ecosystems. Windows access is possible, but it is not equivalent to having a first-class password manager on every platform. Choose Bitwarden or Proton Pass if cross-platform independence is more important than native Apple integration.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errors4. Google Password Manager: best for Chrome and Android
Choose Google Password Manager if your accounts, phones, and browsing already revolve around one Google Account, Chrome, and Android. It is a practical free solution with low setup friction and good native support.
What is included
- Password storage and generation
- Passkey storage and synchronization through Chrome and Android
- Google Account synchronization across supported Chrome and Android devices
- Password security checks and autofill
Google’s Password Manager and passkey documentation explains how synchronized passkeys are protected with a Google Password Manager PIN or Android screen lock. Sign in to the same Google Account in Chrome and Android, open Google Password Manager from Chrome’s password and autofill settings, enable password and passkey saving, and create or verify the Google Password Manager PIN.
A passkey detail that causes confusion
Not every passkey visible on a Windows computer is a Google Password Manager passkey. A device-bound passkey stored by Windows Hello is not backed up or synchronized by Google Password Manager. Before removing an old device or browser, create another recovery method for important accounts.
Limitations
Google Password Manager is more ecosystem-dependent and offers fewer dedicated-manager features for secure notes, sharing, portability, and independent organization. It is a sensible choice for a Chrome/Android user who wants simplicity, but mixed-device users will usually have a smoother long-term experience with Bitwarden or Proton Pass.
5. KeePassXC: best for local and offline control
Choose KeePassXC if you do not want a password-manager provider to host your vault and you are willing to manage files, backups, synchronization, and mobile compatibility yourself. KeePassXC stores an encrypted KDBX database locally rather than operating as a conventional hosted account.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Features
- Unlimited local vault storage
- Browser integration through KeePassXC-Browser
- Passkey support through browser integration
- TOTP storage and generation
- Attachments and custom fields
- Command-line access
- Optional YubiKey or OnlyKey challenge-response protection
The official download page lists KeePassXC 2.7.12 for Windows 10/11, macOS 12 and later, and Linux. Its documentation covers browser integration, passkeys, TOTP, hardware keys, exports, and synchronization.
Installation examples
# macOS
brew install --cask keepassxc
# Ubuntu/Debian
sudo apt install keepassxc
# Fedora
sudo dnf install keepassxc
# Flatpak
flatpak install --user flathub org.keepassxc.KeePassXCOn Windows, the official download page lists this WinGet command:
winget install -e --id KeePassXCTeam.KeePassXCRecommended setup
- Create a new KDBX database with a long, memorable master passphrase.
- Add a key file or YubiKey only if you understand the recovery consequences and have a reliable backup. A second factor that cannot be replaced can lock you out if it is lost.
- Install KeePassXC-Browser.
- Open Tools → Settings → Browser Integration, enable browser integration, and connect the extension.
- If synchronizing through Dropbox, Google Drive, OneDrive, Nextcloud, or another service, avoid editing the database simultaneously on multiple devices. Keep a backup before changing synchronization methods.
- Back up the KDBX file before upgrades, database merges, or synchronization changes.
KeePassXC has no official mobile app. Its documentation points users toward compatible third-party mobile clients. That can work well, but the mobile client, cloud folder, and synchronization process become part of your security and reliability design.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Local-vault failure modes
A local manager removes the password-manager provider as a vault host, but it does not remove risk. You can lose the only database copy, create synchronization conflicts, leave the file in a publicly shared folder, or expose the entire vault through an unencrypted CSV, XML, or HTML export. KeePassXC’s official guide warns users to delete unencrypted exports after migration and explains database synchronization and merging.
6. Zoho Vault Free: a capable cloud alternative
Choose Zoho Vault Free if you want a feature-rich cloud manager with free TOTP and offline access, and you do not need free password sharing. Zoho says accounts automatically move to a free-forever plan after its 15-day trial if the user does not upgrade.
What is free
- Unlimited passwords, passkeys, and storage
- Unlimited devices
- Mobile apps and browser extensions
- Offline access
- Security dashboard
- MFA through Zoho OneAuth
- Built-in TOTP authenticator
See Zoho Vault’s U.S. pricing page for the current plan table and Zoho’s FAQ for its free-forever behavior.
Limitations
Free sharing, advanced administration, cloud backup, breach alerts, and business features are restricted or paid. Zoho Vault is credible and unusually generous in several areas, but it is less familiar to many consumers than Bitwarden, Proton Pass, Apple Passwords, or Google Password Manager.
Other free plans—with restrictions that matter
RoboForm Free: unlimited records, one device
RoboForm Free includes unlimited password storage, offline access, password auditing, and passkey management. Its significant restriction is that the free plan is local-only and limited to one device; it does not provide the cloud synchronization most people expect from a modern password manager. It suits someone who intentionally wants a single-computer vault. See RoboForm’s personal pricing page.
NordPass Free: one active session
NordPass Free allows unlimited password storage and access through installed apps and extensions, but only one active session on one device at a time. That is different from unlimited-device synchronization. If you switch frequently between a phone and a computer, this restriction can be more disruptive than a simple storage cap. See NordPass’s free-versus-premium documentation.
LastPass Free: verify the device-type restriction
LastPass’s current account page describes its free plan as limited to one device type. Older comparison pages may describe different limits, so verify the current terms before importing a vault. It should not be treated as the default recommendation merely because it appears in older “best free” lists. See LastPass’s current account page.
1Password: a trial, not free forever
1Password is a polished paid password manager, but its personal offering provides a 14-day free trial, not a permanent free personal plan. After the trial, payment is required or the account enters the provider’s restricted or frozen-account state. That makes it useful for evaluating the service, but not a free long-term recommendation. See 1Password’s membership and billing policy.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Dashlane: free plan discontinued
Dashlane’s free plan was discontinued as of July 1, 2026. Older articles that list Dashlane Free are outdated. See Dashlane’s current personal-plan comparison.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Keeper: check before relying on old tables
Keeper’s free record limit and device rules have changed across versions and comparison pages. Verify its current official U.S. plan details immediately before publication or purchase instead of copying an older comparison table. It is not included as a primary recommendation here because the supplied current evidence does not establish a stable free-tier limit.
Passkeys should be part of your 2026 decision
Passkeys are not simply stronger passwords stored in a different field. They use a cryptographic key pair: the website stores a public key, while the private key remains in a device, operating-system manager, browser, third-party password manager, or hardware key. The private key is not shared with the website during login. FIDO describes passkeys as designed to resist phishing and distinguishes between synced passkeys and device-bound passkeys in its passkey guidance.
Free products with documented passkey support include:
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →- Bitwarden: Save and use passkeys through its browser extension.
- Proton Pass: Supports passkeys across devices on the free plan.
- Apple Passwords: Stores and synchronizes passkeys through iCloud Keychain.
- Google Password Manager: Synchronizes passkeys through Chrome and Android.
- KeePassXC: Supports passkeys through browser integration, provided the feature is enabled and the database is connected.
- Zoho Vault: Lists passkey management and passwordless unlocking.
- RoboForm: Lists passkey management, although advanced authentication controls are part of Premium.
“Supports passkeys” does not guarantee that every website, browser, app, or operating system will expose the same workflow. Before deleting a password or old passkey, create a second recovery method. A device-bound passkey may be difficult or impossible to recover after device loss; a synced passkey is easier to recover but creates greater dependence on the synchronization provider.
TOTP: protecting the manager versus storing website codes
Two different questions are often confused:
- Can the password-manager account itself use MFA?
- Can the manager store and generate TOTP codes for other websites?
These are the current distinctions in the free plans covered here:
| Product | Account MFA | Integrated TOTP authenticator for other accounts |
|---|---|---|
| Bitwarden | Available on free accounts | Paid feature |
| Proton Pass | Account protection is available through Proton’s account controls | Paid feature |
| Apple Passwords | Protected through Apple Account and device security | Verification-code management included |
| Google Password Manager | Protected through Google Account controls and device unlock methods | Not positioned as a general integrated TOTP vault in the cited free-plan comparison |
| KeePassXC | Database protection; optional key file or hardware-key challenge-response | TOTP storage and generation included |
| Zoho Vault | MFA through Zoho OneAuth | Built-in authenticator included |
Keeping a password and its TOTP secret in one unlocked vault is convenient, but it reduces separation between the two factors. If malware or an attacker gains access to the unlocked vault, both the password and second-factor secret may be exposed. Security-conscious users may prefer a separate authenticator app or a hardware security key for important accounts.
NIST recommends password managers as a practical way to maintain a distinct password for every service and recommends support for passwords of at least 64 characters. CISA likewise recommends long, random, unique passwords and using a password manager with multifactor authentication. See the NIST Digital Identity Guidelines and CISA password-manager guidance.
Are free password managers safe?
A free password manager can be safe, but “free” neither proves security nor makes every service equivalent. Evaluate the architecture and the way you will use it.
What protects a cloud vault
- Encryption before synchronization: A client-side or end-to-end encrypted design can prevent the provider from reading ordinary vault contents.
- A strong master passphrase: The master passphrase is still the foundation of a zero-knowledge design.
- MFA: Account MFA can block an attacker who obtains the master password, although MFA does not replace a strong master passphrase.
- Passkeys: Passkeys reduce phishing exposure when the site and login flow support them.
- Audits and open source: Public source code and independent audits provide useful evidence, but an audit covers a defined scope and version—not every future build, server component, or user device.
- Export and recovery: You should be able to leave the service and recover after losing a device.
A “zero-knowledge” or “zero-access” claim describes how the provider handles encrypted vault contents. It does not make phishing, malware, malicious browser extensions, weak master passwords, account takeover, or lost recovery codes harmless. An infected computer can steal credentials after the vault is unlocked or intercept autofilled data.
Cloud versus local
| Model | Advantages | Dependencies and risks |
|---|---|---|
| Cloud password manager | Automatic synchronization, easy mobile use, convenient passkey portability, better recovery after a lost device, and polished sharing | Provider availability, account security, application updates, and the security of every unlocked endpoint |
| Local vault | No password-manager provider needs to host the vault; you control files, backups, and synchronization; offline access is straightforward | You can lose the database, create sync conflicts, expose an unencrypted export, or configure an unsafe cloud folder; mobile setup is harder |
| Browser or operating-system manager | Already installed, low friction, and usually excellent native autofill and passkey integration | Ecosystem lock-in, less flexible sharing and notes, and the risk of accidentally maintaining separate stores in multiple browsers and systems |
How to migrate safely
Migration is the point at which a password vault is most likely to be exposed. Do it deliberately and keep the old store until every critical login works.
- Choose the destination based on your devices and threat model. Select a cloud manager for convenient synchronization, a built-in manager for a single ecosystem, or a local vault if you accept the maintenance burden.
- Create a new, unique master passphrase. Do not reuse the password from your old manager, email account, or any website. Make it long and memorable, then write it on paper and store it securely offline.
- Enable MFA before importing the vault. Save recovery codes offline. For high-value accounts, consider a hardware security key or a separate authenticator.
- Export the old vault to a temporary encrypted file when possible. A CSV export may be plaintext even if the original manager was encrypted.
- Import the data. Common migration sources include Chrome, Firefox, Safari, Edge, Bitwarden, Proton Pass, 1Password, LastPass, Dashlane, KeePass/KeePassXC, RoboForm, and NordPass. Proton publishes source-specific Pass import guides.
- Check the import counts. Compare logins, secure notes, cards, identities, passkeys, folders, and TOTP secrets. Some formats cannot carry every item type.
- Test important accounts manually. Start with email, banking, medical services, work accounts, cloud storage, and the password manager itself. Test on both desktop and mobile if you use both.
- Change the most important passwords first. Prioritize your email account, financial services, mobile carrier, cloud storage, work accounts, and recovery accounts. Use generated unique passwords.
- Delete plaintext exports. Remove the file from Downloads, the desktop, the recycle bin or trash, cloud-sync folders, and any backups where applicable. Do not leave a CSV in email, a note app, or a shared drive.
- Disable competing browser password storage. Two active managers can save different versions of the same login and create confusing autofill behavior.
- Create and test recovery. Confirm that you can unlock the manager, access recovery codes, and restore or export the vault before deleting the old password store.
- Keep the old manager temporarily. Remove it only after critical accounts and passkeys have been verified on every device.
Disable Chrome’s competing password manager for Bitwarden
In Chrome or another Chromium-based browser, open:
chrome://password-manager/settingsTurn off:
- Offer to save passwords and passkeys
- Sign in automatically
For Brave and other Chromium browsers, use the equivalent browser settings page or the browser’s corresponding internal URL. Bitwarden documents the process in its browser-autofill instructions.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Proton Pass export details
Proton Pass exports can be initiated from the browser extension, web app, or Windows app; mobile apps cannot currently perform the export. Available formats include a PGP-encrypted ZIP, an unencrypted ZIP, and CSV. Proton recommends the encrypted export for backups. Its export documentation explains the current options.
Best Value
- Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
- Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
- Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
- Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
- For the driver download and user guide, please visit TrustKey Solutions Home support page.
KeePassXC export warning
KeePassXC can export CSV, XML, or HTML, but these files may be unencrypted. Back up the KDBX database before migration, use the export only temporarily, and securely delete the exported file as soon as the import is verified.
What happens if you forget the master password?
With a properly designed zero-knowledge vault, the provider generally cannot simply reset the master password and decrypt your data. Bitwarden explicitly states that it has no knowledge of, and no way to retrieve or reset, the master password. Other encrypted designs have similar practical consequences: account recovery may restore access to the account without recovering the encrypted vault.
Before moving your data, follow this recovery checklist:
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →- Use a long passphrase you can remember without relying on a browser’s autofill.
- Store a written copy in a secure offline location.
- Enable account MFA.
- Save MFA recovery codes offline.
- Maintain an encrypted export or provider-supported backup.
- Test the recovery process before deleting the old password store.
- For a local KDBX vault, keep multiple tested backups in separate secure locations.
- Do not add a key file or hardware key unless you have a dependable recovery plan for its loss.
Do not treat a still-unlocked phone or browser as proof that recovery works. A device may provide temporary access while the account remains impossible to restore elsewhere.
Free sharing: which options actually work?
| Product | Free sharing situation |
|---|---|
| Bitwarden | Free two-person organization with up to two collections; broader sharing and family features require paid plans |
| Apple Passwords | Shared password groups for trusted contacts using compatible Apple devices |
| Proton Pass | Secure sharing is a paid feature |
| Zoho Vault | Free plan excludes password sharing |
| RoboForm | Free plan is local-only; cloud sharing is part of Premium |
| KeePassXC | KeeShare can share databases, but it is a technical database workflow rather than a polished family-sharing service |
Never solve a sharing problem by sending a master password, CSV file, or unencrypted database through email, messaging, or a plain note. Use the manager’s organization, shared-group, or encrypted-database feature—or keep the credential separate.
Final decision tree
- I use Windows, Mac, Android, and iPhone: Start with Bitwarden Free or Proton Pass Free. Choose Proton if 10 email aliases are valuable; choose Bitwarden if free two-person sharing or the broadest independent free tier matters more.
- I want free email aliases: Choose Proton Pass Free, which includes 10.
- I use almost exclusively Apple devices: Choose Apple Passwords for the most native experience.
- I use almost exclusively Chrome and Android: Choose Google Password Manager for low-friction synchronization and autofill.
- I do not want a provider to host my vault: Choose KeePassXC if you can maintain backups, synchronization, and a compatible mobile client.
- I need free sharing with one other person: Use Bitwarden’s free two-person organization, or Apple Passwords if both people use compatible Apple devices.
- I use one computer and want local-only storage: Compare RoboForm Free with KeePassXC. RoboForm is simpler; KeePassXC gives more control and requires more setup.
- I need family sharing, emergency access, file attachments, or advanced breach monitoring: Compare paid plans rather than forcing an important requirement into a restricted free tier.
For most readers, the practical choice is straightforward: install Bitwarden Free, create a unique master passphrase, enable MFA, import carefully, verify critical logins, delete plaintext exports, and disable competing browser storage. Switch to Proton Pass for its aliases and privacy ecosystem, Apple Passwords or Google Password Manager for a single-platform household, or KeePassXC when local control is worth the additional responsibility.
Frequently Asked Questions
Is 1Password free?
Not as a permanent personal plan. 1Password provides a 14-day trial; after the trial, a subscription is required or the account becomes restricted according to its billing policy.
Which free password manager supports free family sharing?
Bitwarden Free provides a two-person organization with up to two collections. Apple Passwords also supports shared password groups for trusted contacts using compatible Apple devices. Proton Pass and Zoho Vault restrict secure sharing on their free plans.
Can a free password manager store passkeys?
Yes. Bitwarden, Proton Pass, Apple Passwords, Google Password Manager, KeePassXC, Zoho Vault, and RoboForm document passkey support. The exact ability to create, synchronize, or autofill a passkey depends on the website, browser, operating system, and product implementation.
Is it safe to store TOTP codes beside passwords?
It is convenient, but it reduces separation between the two factors. If an attacker or malware gains access to an unlocked vault, both the password and TOTP secret may be exposed. A separate authenticator app or hardware security key provides stronger separation for important accounts.
What is the safest free password manager?
There is no universal safest choice. A cloud manager such as Bitwarden or Proton Pass provides encrypted synchronization and easier recovery, while KeePassXC gives technically capable users more direct control over the vault file. In every case, a strong master passphrase, MFA, updated devices, careful recovery planning, and malware-resistant endpoints matter.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →The Bottom Line
Best overall: Bitwarden Free. It gives most users the essential combination of unlimited entries, multi-device synchronization, broad platform support, passkeys, and a useful free tier. Choose Proton Pass for email aliases and Proton’s privacy ecosystem, Apple Passwords or Google Password Manager for a single-device ecosystem, and KeePassXC for local/offline control. Whatever you choose, the security improvement comes from using a unique generated password for every account, enabling MFA, protecting recovery codes, and completing migration without leaving a plaintext export behind.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
