Passwords and Password Managers

A password is only as strong as the number of places it is used. A long, complex password that you reuse across ten sites is weaker in practice than ten simple ones that are all different, because a breach of any single site exposes every account that shares the password.

A password manager solves this completely. It is an encrypted vault that generates and stores a unique random password for every account, locked behind one master password that only you know. The vault is encrypted on your own device, so even the company that stores it cannot read it. You remember one strong passphrase; the manager handles the rest and fills your logins automatically.

To switch, install a reputable manager, create a master password you have never used anywhere else, and turn on two-factor authentication for the manager itself. Import your existing passwords from your browser, then over the following weeks let the manager generate a fresh strong password each time you log in somewhere. Start with email, banking, and anything tied to money. Within a month the migration is effectively done, with no painful all-at-once effort.

Choose a master passphrase of four or five random words rather than a short clever string. It is both easier to remember and harder to crack.