How to start using a password manager
A password manager is a locked vault that invents and remembers a different long password for every site, so the only one you ever type is the vault's own. Pick one with a good security record, protect it with a long phrase you have never used before, add a second sign-in step, and then swap your old passwords out gradually as you log in, most important accounts first.
About 30 minutes to learnEveryday skill
Mark it once you can do it without this page open.
How to do it
- Pick a manager with a long security track record, either the one built into your device or a standalone app.
- Make the vault's phrase from five or six unrelated words, and do not use it anywhere else.
- Write that phrase on a card and keep it at home in a drawer only you use until it sticks.
- Add a second sign-in step to the vault itself.
- Replace the passwords on your email, bank and phone carrier accounts first with ones the vault generates.
- Let the vault offer to save or change each remaining password as you log in over the next month.
- Delete old password lists in notes apps, spreadsheets or browser files once everything is in the vault.
Common mistakes
- Choosing a vault phrase you already use somewhere else.
- Trying to change a hundred passwords in one night and quitting halfway.
- Keeping a notes file of passwords next to the vault.
Quick self-check
Three questions. Your last score is kept in this browser.
Teach this to someone
A one-page sheet for showing a friend, a roommate or a kid: what to say, what to show, and one question to check it landed.
Teach: How to start using a password manager
What to say
A password manager is a locked vault that invents and remembers a different long password for every site, so the only one you ever type is the vault's own. Pick one with a good security record, protect it with a long phrase you have never used before, add a second sign-in step, and then swap your old passwords out gradually as you log in, most important accounts first.
What to show, in order
- Pick a manager with a long security track record, either the one built into your device or a standalone app.
- Make the vault's phrase from five or six unrelated words, and do not use it anywhere else.
- Write that phrase on a card and keep it at home in a drawer only you use until it sticks.
- Add a second sign-in step to the vault itself.
- Replace the passwords on your email, bank and phone carrier accounts first with ones the vault generates.
- Let the vault offer to save or change each remaining password as you log in over the next month.
- Delete old password lists in notes apps, spreadsheets or browser files once everything is in the vault.
The check question
Ask: What is the one password you still need to remember?
Related skills
- How to turn on two-step login
- What to do if an account gets hacked
- How to spot a phishing email or text
- Every skill in Tech and Digital Safety
Words on this page
Sources
- National cybersecurity agency guidance for home users, 2026. Checked September 28, 2026.
Last reviewed . First published .