Technology buying guide
How to choose a password manager
A password manager lets you use a unique, strong password for every account, which is one of the most effective security steps you can take. Because it holds the keys to everything, choose one with a well-documented security design, independent audits and a recovery plan you understand.
Weighted criteria
What matters when choosing password managers
Weights add up to 100 and reflect how much each factor usually decides satisfaction. Change them to fit you in the scorecard.
Security design & audits
30%End-to-end encryption where the provider cannot read your vault, backed by published independent audits.
How to check: Read the security white paper and the dates and scope of recent audits.
Incident history & transparency
20%How the company has handled past security incidents.
How to check: Search for past incidents and read how clearly they were disclosed and what changed.
Login protection & passkeys
15%Multi-factor authentication for the vault and support for passkeys.
How to check: Check which second factors are supported, including hardware security keys.
Apps & autofill
15%Apps and browser extensions for every device you use, with reliable autofill.
How to check: Try it on your phone and computer during a free trial.
Recovery & export
10%What happens if you forget the master password, and whether you can export your data.
How to check: Read the recovery options and test an export.
Price & sharing
10%Cost for you or your family and secure sharing features.
How to check: Compare renewal prices and family plan limits.
Avoid
Red flags
- No published security design or independent audit.
- The provider can reset your vault without your master key (meaning it can read your data).
- Poor disclosure of a past breach.
- No way to export your data.
Before you pay
Checklist
- Read the security design and audit summary.
- Turn on multi-factor authentication.
- Create a long, unique master passphrase.
- Set up recovery options and store them safely.
- Import passwords and then change weak or reused ones.
Ask the seller
Questions to ask
- Can you read my vault data?
- When was the last independent audit and what did it cover?
- How do I recover access if I forget my master password?
After you buy
Warranty & returns
Password managers are subscriptions; refunds and trials vary by provider and app store.
- Export a backup before cancelling or switching.
- App-store purchases follow the store's refund rules.
Common mistakes
Myths vs facts
Myth Putting all passwords in one place is riskier than reusing them.
Fact Password reuse is a common way accounts get taken over. A well-secured manager with MFA reduces overall risk.
Myth Browser-saved passwords are the same as a password manager.
Fact Built-in managers have improved, but dedicated ones may add cross-platform sync, sharing and audits. Either beats reuse.
Where this comes from
Official sources
Criteria and weights are AltFTool's editorial judgement, not a statement by these bodies. This guide is general consumer information, not professional advice.
FAQ
Password Managers: common questions
Is a free password manager good enough?
Many free options, including built-in browser and phone managers, are far better than reusing passwords. Check sync and security features.
What makes a good master password?
A long passphrase of several random words that you do not use anywhere else.
Should I switch to passkeys?
Where sites support them, passkeys resist phishing. A manager that stores passkeys helps you use them across devices.
Free tools
Use these with this guide
Weighted scorecard
Review pattern checker
Complaint letter writer
Warranty & returns tracker
True cost calculator
Also handy: password generator, password strength checker
New buying guides and recall alerts, once a month
Practical checklists before big purchases. No sponsored rankings, unsubscribe in one click.