A free password manager stores your logins securely, fills them in for you and creates strong new passwords, so you only need to remember one main password. Built-in options are easiest, open-source apps give you the most control, and cloud apps make syncing across devices simple. The free plan you choose should sync everywhere you work.
Reusing the same password on several sites is still one of the easiest ways for a small business to get hacked. A password manager fixes that habit without making your life harder, and the free versions are better than most people expect.
Below are ten free password managers in no particular order, sorted alphabetically, from small open-source projects to built-in tools from big names. Each description comes from the tool's own website, re-checked today. If you're worried about your website as well as your logins, my guide on how to stop hackers getting into your business website covers the next layer.
Pick the manager your whole household or team will use. The best security tool is the one people stick with, not the one with the longest feature list.
Free password managers at a glance
In the free plan column, Yes means the tool's own site describes a free plan or free use, Trial only means a time-limited trial, and No means neither is stated. Free plans may limit devices, sharing or extra features.
| Tool | Type | Good for | Free plan |
|---|---|---|---|
| Apple Passwords | Built-in password app | iPhone, iPad and Mac users | Yes |
| Avira Password Manager | Password manager app | Simple free password storage | Yes |
| Bitwarden | Open-source password manager | Free syncing across devices | Yes |
| Buttercup | Open-source password manager | Keeping vaults in your own storage | Yes |
| Google Password Manager | Built-in password manager | Chrome and Android users | Yes |
| KeePass | Open-source password manager | Offline password storage on Windows | Yes |
| KeePassXC | Open-source password manager | Offline vaults on any desktop | Yes |
| NordPass | Password manager | Easy free vault for individuals | Yes |
| Proton Pass | Encrypted password manager | Privacy-focused password storage | Yes |
| Psono | Open-source team password manager | Small teams self-hosting passwords | Yes |
Ten free password managers to try
Apple Passwords
Best for: Apple users who want saved passwords, passkeys and verification codes in a built-in app that syncs across their devices.
Avira Password Manager
Best for: People who want a straightforward free password vault with browser extensions and mobile apps.
Bitwarden
Best for: Individuals and small teams who want an open-source manager with free syncing across browsers and phones.
Buttercup
Best for: People who want a free open-source vault they can keep in their own cloud storage or on their computer.
Google Password Manager
Best for: People who use Chrome and Android and want passwords saved and filled automatically with their Google account.
KeePass
Best for: Windows users who want a free, offline password database that never touches someone else's server.
KeePassXC
Best for: Mac, Windows and Linux users who want a modern offline password manager compatible with KeePass files.
NordPass
Best for: Individuals who want a clean, simple password manager with a free plan for personal use.
Proton Pass
Best for: Privacy-minded users who want an end-to-end encrypted password manager with email aliases.
Psono
Best for: Small businesses that want an open-source team password manager they can host themselves.
What NIST now says about changing passwords
Here's the rule most office IT policies still get wrong. NIST's digital identity guidelines say services shall not require people to change passwords periodically, and shall not impose composition rules such as forcing a mix of character types. A change should be forced only when there's evidence a password has been compromised.
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
That's good news if you use a password manager. Long, unique, randomly generated passwords stored in a vault are exactly what the guidance is built around, so stop forcing your team to change passwords every few months and spend that effort on turning on two-factor sign-in instead.
Built-in, cloud or offline?
- Built-in: easiest if everyone uses the same phone and browser family.
- Cloud apps: sync across any device and make sharing simple.
- Offline apps: maximum control, but you manage backups yourself.
- Self-hosted team tools: good for businesses with technical help.
- Passkeys: check the manager supports them, as more sites use them.
Moving to a password manager in an afternoon
- Choose one manager and install it on every device you use.
- Import the passwords saved in your browser.
- Change the password on your email account first, using a long generated one.
- Turn on two-factor sign-in for email, banking and social accounts.
- Work through your most important accounts and replace reused passwords.
Password habits that matter more than the app
- One account, one password: reuse is the habit that does the damage.
- Long beats clever: a long generated password is stronger than a short tricky one.
- Two-factor everywhere it counts: email, banking, social and your website.
- Remove old accounts: close the logins you no longer use.
Security is a team habit as much as a tool, and my tips to build a strong cybersecurity culture help you get everyone on board.
Do you make password managers? Tool makers can ask to be considered for a featured place on this list.
My plain advice on free password managers
Start with your email account. If someone gets into your inbox, they can reset almost everything else, so give it the strongest password and two-factor sign-in before you do anything else.
And write your main password and recovery codes down on paper, kept somewhere safe at home. A password manager you're locked out of isn't much use.
Frequently asked questions
Is a free password manager safe?
Reputable free managers use strong encryption. The bigger risks are a weak main password and no two-factor sign-in.
Do I still need to change my passwords regularly?
NIST's guidelines say services shouldn't force periodic changes. Change a password when there's a sign it's been exposed.
What happens if I forget my main password?
Some managers can't recover it at all, so keep a written recovery code somewhere safe.
Can I share passwords with my team for free?
Some free plans allow limited sharing, while team features are often part of business plans.
Is my browser's password manager good enough?
For many people, yes, especially if they stick to one browser and phone family.
What are passkeys?
Passkeys let you sign in with your device's screen lock instead of a password, and many managers now store them.
Can I move my passwords between managers?
Yes. Most managers can export and import passwords, usually as a file you should delete afterwards.
Are offline password managers better?
They keep your vault off other servers, but you're responsible for backups and syncing.
