Security audits aren’t perfect-they offer just a snapshot of the software and infrastructure-but they are a signal of trust and transparency. But those promises of security only go so far, so we require that any password managers we recommend participate in regular third-party security audits (preferably audits that they make public) and have a bug-bounty program. A good password manager needs to use strong encryption to protect your data on your computer, on your password manager’s server, and when your data is moving between the two.

Good protection for your passwords: You’re trusting your password manager with your entire digital existence, and your password manager should store your data securely.

Regardless of the password manager you use, it’s important to protect your data with a strong master password-we have advice for how to do that below. Bitwarden works on the same devices as 1Password, so you can use it with any computer, phone, tablet, or browser. But the free version of Bitwarden offers the core features you need in a password manager, including the ability to sync as many passwords as you want across as many devices as you own, support for software two-factor authentication, and sharing between two people with separate logins using a two-person organization. Plus, Bitwarden isn’t as polished overall and lacks the in-app guidance of 1Password, which makes it harder for beginners to get the hang of.

The free version of Bitwarden gets the basics right and doesn’t cost a thing, but it lacks a few features that make 1Password such a standout option, such as password checkups and 1 GB of encrypted storage (all features you can find in Bitwarden’s reasonably priced, $10-per-year premium plan).

Keepassxc browser extension