
Set up a password manager
Move your passwords into a secure manager and replace weak, reused ones while you're at it.
- Time:
- 60 min
- Cost:
- low
- Difficulty:
- moderate
- Where:
- Indoors
- Best:
- Solo
The reason to set up a password manager is not the convenience, it is that password reuse turns one breached website into access to your email, and from your email into everything else. An hour is enough to install one, secure it properly, and fix the handful of accounts where reuse actually matters.
Why set up a password manager is worth an hour
Attackers take credentials leaked from one site and try them elsewhere automatically, which is why reuse is the specific dangerous behavior rather than password complexity. A manager removes the need to remember anything, so unique passwords stop requiring effort. Fixing your email account first matters because email is the reset mechanism for everything else.
How to set up a password manager step by step
- 1
Choose one and check its history
Look at how it handled past security incidents. Response to problems tells you more than any feature list.
- 2
Create a strong master password
Several unrelated words, memorized rather than stored. This is the one password protecting all the others.
- 3
Turn on two-factor authentication
On the manager itself, first. A vault protected only by a password is a single point of failure.
- 4
Import what your browser has saved
Most managers import directly. Then remove them from the browser so there is one source of truth.
- 5
Replace the reused ones that matter
Email first, then banking, then anything storing card details. Do not attempt all two hundred accounts today.
Tips to get more out of it
- Write the master password on paper and store it somewhere secure. Losing it can mean losing the entire vault.
- Set up emergency access or a recovery contact if the manager offers it. Consider who needs access if you cannot provide it.
- Check whether your accounts appear in known breaches. Most managers now flag this automatically.
Ways to mix it up
If you have a family, most managers offer shared vaults, which solves the recurring problem of household logins written on paper. If you already use one, spend the hour enabling two-factor authentication on your top ten accounts instead, which is the bigger remaining gap.
Set up a password manager: frequently asked questions
Is it safe to keep all passwords in one place?
A properly encrypted vault with a strong master password and two-factor authentication is considerably safer than reusing passwords everywhere.
What if I forget the master password?
Most managers cannot recover it by design. Write it down and store it securely, and set up any recovery option offered.
Which accounts should I fix first?
Email, because it can reset everything else. Then banking, then anything holding payment details.
Related activities
Organization
Back up your important files
Set up an automatic backup for your photos and documents — before you need it, not after.
Organization
Digitize important paper documents
To digitise paper documents, scan readable copies, give them consistent names and store them somewhere you can back up and search.
Organization
Declutter your digital workspace
Tidy your desktop, close those 47 browser tabs, and uninstall apps you never use.