Choose the password manager that encrypts your vault on your device by default, lets you read a recent independent audit, lets you get back in if you forget the master password, works on every device you and your household use, and has a price you can live with after the first year. Five checks settle that, and you can do each from the vendor's own pages in a couple of minutes. For most people the answer is Bitwarden: free on every device, or $19.80 a year with emergency access for a trusted contact. Bitwarden has no recovery code, so on the free plan set up a login passkey or keep a second device signed in on day one. Our ranking of the best password managers scores nine tools on these points.
If every device in your home is an iPhone, iPad or Mac, you may not need to choose at all: Apple Passwords is free and end-to-end encrypted by default.
Do you need a separate password manager?
You need one if your devices span more than one company's ecosystem, if you share logins with family, or if you want someone to be able to reach your accounts in an emergency. Otherwise the one built into your phone can be enough, with one caveat each:
- Apple Passwords encrypts passwords and passkeys end to end under Apple's standard data protection. It has no Android or Linux app, Apple publishes no independent audit of it, and Apple's Legacy Contact can't access passwords or passkeys, so it doesn't solve inheritance.
- Google Password Manager encrypts passkeys end to end (Google's passkey announcement), but not passwords until you turn on on-device encryption, which is off by default and which Google says it will set up for everyone over time. Turn it on if you use it. Google warns it can't be removed once set up, and resetting it deletes all your saved passwords.
The EFF's February 2026 advice puts the trade-off plainly: built-in managers are free, but "they tend to lock you into a single-vendor world." A built-in manager with unique passwords beats a separate one you never set up.
Check 1: Is your vault encrypted on your device by default?
The vault should be encrypted and decrypted on your device, with a key derived from a password only you know, so the company stores data it can't read. Vendors call this "zero-knowledge" or end-to-end encryption. To check, open the vendor's security page or white paper and look for two things: that encryption happens on the device, and that it is the default rather than a setting. Google's is the main product that fails the second test.
"Zero-knowledge" has limits worth knowing. In 2026, researchers at ETH Zurich and USI Lugano showed that if a vendor's own servers turned hostile, they could recover passwords from several popular managers: their full paper reports 12 attacks on Bitwarden, seven on LastPass, six on Dashlane and six on 1Password, and says "remediation is underway". Not every attack will be fixed: Bitwarden accepted three of its issues as design decisions, and 1Password says its six reflect limits it already documents. That is a reason to prefer vendors who let outsiders test them, not a reason to avoid password managers. The study's co-author Kenneth Paterson advised choosing one that openly discloses possible security gaps, is independently audited, and has end-to-end encryption on by default at the very least, according to an ETH News article reprinted by Netzwoche.
The encryption algorithm's name matters less than it looks. AES-256 and XChaCha20 are both strong; what decides how well a stolen vault holds up is your master password and how slowly the app turns it into a key. Look for Argon2, bcrypt, or PBKDF2 with at least 600,000 iterations (the figure OWASP recommends), or for an extra device-held secret like 1Password's Secret Key.
Check 2: Can you read a recent independent audit?
An audit report you can open, dated in the last two years, is the best outside evidence that the app does what the vendor says. The EFF notes that audits "can increase confidence that the software really does what it is designed to do." To check, find the vendor's security or audit page and note three things: the date, the firm, and whether you can read the report itself or only a summary or a certificate.
Here is what we found in October 2026:
| Tool | Latest independent app testing you can read |
|---|---|
| Proton Pass | Full Recurity Labs report from 2026, published in May 2026 (Proton's announcement) |
| Bitwarden | Full reports from 2025 (Cure53, Unit 42, Fracture Labs, ETH Zurich) on its audit page |
| RoboForm | A three-page summary of a 2024 Secfault pentest, retested to February 2025 |
| 1Password | Full ISE report from 2020; newer pentests on request through its Trust Center |
| Keeper | Pentest reports for enterprise customers on request; certifications |
| NordPass | Cure53, announced in March 2020 |
| Apple Passwords | None published; certifications only |
| Dashlane, LastPass | None found; certifications only |
A SOC 2 report or an ISO 27001 certificate checks how a company runs its systems. It doesn't review the app's code, so treat it as a lesser signal.
Also check the breach record. The question to ask is whether attackers ever took users' vaults. In LastPass's 2022 breach they copied a backup of customer vault data, and the UK Information Commissioner's Office fined LastPass £1.2 million over the breach in December 2025. From late May 2026 attackers downloaded the encrypted vaults of fewer than 20 Dashlane users by guessing device-registration codes. A stolen vault can be attacked offline forever, so only a long, unique master password protects it.
Check 3: How do you get back in if you forget the master password?
With true end-to-end encryption, the company can't reset your master password, so the recovery route has to exist before you need it. Look for four kinds:
- A recovery code or phrase you print and keep: 1Password, Proton Pass, Keeper, NordPass and Dashlane offer one.
- An organizer who can restore a family member's access: 1Password Families does this. Bitwarden reserves it for Enterprise plans.
- A device or passkey you've already set up: Keeper, NordPass, LastPass, RoboForm and Dashlane let you reset or recover with your face or fingerprint in an app you're signed in on, and Bitwarden lets you log in with a passkey that unlocks your vault or with approval from another signed-in device.
- Emergency access, where a trusted contact can request your vault and gets it after a waiting period unless you refuse: Bitwarden, Proton Pass, Keeper, NordPass, RoboForm and LastPass offer it, usually only on paid plans. 1Password and Dashlane don't.
The UK's National Cyber Security Centre, writing for organizations, warns that "the recovery method may be exploited to gain access to the credentials" and advises understanding who holds that ability (NCSC buyer's guide). A recovery code on paper in a drawer is the simplest route for most people. Set it up on the first day, because no vendor can create one after you're locked out.
Check 4: Does it work on every device you and your family use?
List every phone, computer and browser in the household, including the one Linux laptop and the partner's Android phone, then check the vendor's download page. Native apps for Windows, macOS, Linux, iOS and Android and extensions for Chrome, Firefox, Safari and Edge cover nearly everyone. Bitwarden, Proton Pass, 1Password, Keeper and NordPass have all of them. RoboForm and LastPass reach Linux only through a browser extension, Dashlane has no desktop apps at all, and Apple Passwords has no Android app.
Check passkeys too: every tool in our ranking now stores and syncs them, but moving them to another manager is still uneven. Export files usually leave passkeys out: 1Password's importer skips passkeys from a Bitwarden export, and NordPass's passkeys FAQ says there is no option to import or export them. Direct transfer is the newer route. Through the FIDO Credential Exchange standard, apps that support it can move passwords and passkeys straight to each other: on iOS 26 and macOS 26 Dashlane lists Apple Passwords, 1Password and Bitwarden, and on Android 1Password, Bitwarden and Google Password Manager (Dashlane's Credential Exchange guide); Bitwarden supports it on iOS 26 and Android 14 or later (Bitwarden's import guide). If you plan to use passkeys heavily, check that both your current manager and the one you might move to support it.
Check 5: What will it cost after the first year?
Compare the renewal price, not the headline. Several vendors show a first-year discount on the pricing page: 1Password's $2.99 a month becomes $3.99 at renewal (1Password pricing), RoboForm Premium renews at $29.88 a year (RoboForm pricing), with any first-year discount shown only at checkout, and NordPass Premium was listed at $23.88 for the first year and $35.88 after by PanicVault, which sells a competing password manager, in September 2026. Prices also move: Bitwarden Premium went from $10 to $19.80 a year in 2026, 1Password from $35.88 to $47.88 (MobileSyrup on the increase), and Dashlane raised prices from February 2026.
Free plans differ more than their names suggest. Bitwarden's and Proton Pass's work on unlimited devices. RoboForm's works on one device, NordPass's allows one active session, LastPass's works on one device type, computers or phones but not both, and Keeper's holds 10 records on one mobile device, with no sync (Keeper Free compared with the trial). A free plan can also end: Dashlane stopped its free plan in September 2025, and former free users were left with a year to export their data.
What matters less than it looks
- Encryption buzzwords. "Military-grade" describes AES-256, which every serious manager uses. Ignore it.
- Bundled extras. VPNs, dark web monitoring and identity insurance add to the price without protecting your vault.
- Feature counts. A long feature table matters less than the five checks above. Autofill quality varies, but we found no independent test with a published method that measures it across the field, so try it yourself.
A short trial before you commit
This is a routine you can run in about 15 minutes during a free plan or trial; it's a suggestion, not a test we ran:
- Install the app on your phone and your computer and save one login on each.
- Set up the recovery code or emergency contact, and store the code offline.
- Export the vault to see what format you get and whether passkeys come with it, then delete the file.
- If you're buying for a family, invite one member and share one item.
- Go to checkout and read the renewal price before you pay.
Which one fits you?
- Most people: Bitwarden, free or $19.80 a year.
- You fear being locked out: Proton Pass, for its recovery phrase, recovery file and emergency access.
- A family where someone will forget their password: 1Password Families, whose organizer can restore access. Our 1Password vs Bitwarden comparison weighs that against the price.
- Every device is Apple: Apple Passwords. If someone in the house later gets an Android phone, Apple Passwords can transfer passwords and passkeys to a manager that supports Credential Exchange.
- You won't trust any company's servers: a local, open-source vault such as KeePassXC, which keeps an encrypted file on your computer. It has no official phone app or sync, so you take on backups and syncing yourself.