A password manager is software that creates, stores and autofills login credentials in an encrypted vault. You remember a single strong master password, and the manager handles a unique random password for every site.
Why it matters
People reuse passwords because remembering dozens is impossible, and reuse is what makes credential stuffing work. A manager removes that trade-off. Many also notice when a saved site is breached and refuse to autofill on lookalike phishing domains, since the domain does not match the saved entry.
Most managers also include a built-in generator, secure notes and shared vaults for teams, and they work on phones as well as browsers.
Example
Instead of using Fluffy2020 everywhere, your manager creates a 20-character random password such as t7Qm-92vLx... for each site. If one site leaks it, the others remain safe.
Common mistakes
- Choosing a weak or reused master password, which guards everything.
- Skipping two-factor authentication on the manager account itself.
- Not storing recovery codes, then losing access to the vault.
Related
Get notified when this term updates
Plus occasional practical tips on uptime and monitoring, nothing else. Unsubscribe anytime.
This page is general information written by our editorial team and updated when documentation changes. Servers and providers differ, so test changes safely first. See our editorial policy and disclaimer.