How to use a password manager
A password manager stores a unique, strong password for every account behind one master passphrase you remember. Choose a reputable manager, create a long passphrase of four or more random words, turn on two-factor sign-in for the manager itself, then change your most important passwords to generated ones, one account at a time. Set up emergency access for someone you trust.
Why it matters: One strong habit replaces dozens of reused passwords.
Steps
- Choose a well-reviewed password manager, whether your phone's built-in one or a standalone app.
- Create a master passphrase of four or more random words that you have never used anywhere.
- Write the passphrase on paper and keep it somewhere safe at home until you know it by heart.
- Turn on two-factor sign-in for the password manager.
- Change your email password first to a generated one, then banking, phone account and social media.
- Let the manager save each new password as you sign in to other sites over the next few weeks.
- Set up emergency access or a legacy contact if the manager offers it.
Common mistakes
- Reusing an old password as the master passphrase.
- Trying to move every account in one evening and giving up.
- Keeping a separate spreadsheet of passwords alongside the manager.
Teach this to someone
A one page sheet for showing a friend, a teenager or a parent: what to say, what to show, and one question to check it landed.
Teach: How to use a password manager
What to say
A password manager stores a unique, strong password for every account behind one master passphrase you remember. Choose a reputable manager, create a long passphrase of four or more random words, turn on two-factor sign-in for the manager itself, then change your most important passwords to generated ones, one account at a time. Set up emergency access for someone you trust.
What to show
- Choose a well-reviewed password manager, whether your phone's built-in one or a standalone app.
- Create a master passphrase of four or more random words that you have never used anywhere.
- Write the passphrase on paper and keep it somewhere safe at home until you know it by heart.
- Turn on two-factor sign-in for the password manager.
- Change your email password first to a generated one, then banking, phone account and social media.
- Let the manager save each new password as you sign in to other sites over the next few weeks.
- Set up emergency access or a legacy contact if the manager offers it.
Check question
What makes a good master passphrase?
Answer: Four or more random words you have never used. Long, random and unique is hard to guess and not in any leaked list.
Your checklist
Saved only in this browser.
Quick quiz
Three questions. Your score is saved only in this browser.
Related skills
Sources
- US national cybersecurity guidance for individuals, 2026. Reviewed September 28, 2026.
Written in our own words from the sources above. It is general information, not advice for your situation; where a professional, your doctor or your lease says something different, follow them.
Last reviewed . First published .