set up a password manager
Organization

Set up a password manager

Move your passwords into a secure manager and replace weak, reused ones while you're at it.

Time:
60 min
Cost:
low
Difficulty:
moderate
Where:
Indoors
Best:
Solo

The reason to set up a password manager is not the convenience, it is that password reuse turns one breached website into access to your email, and from your email into everything else. An hour is enough to install one, secure it properly, and fix the handful of accounts where reuse actually matters.

Why set up a password manager is worth an hour

Attackers take credentials leaked from one site and try them elsewhere automatically, which is why reuse is the specific dangerous behavior rather than password complexity. A manager removes the need to remember anything, so unique passwords stop requiring effort. Fixing your email account first matters because email is the reset mechanism for everything else.

How to set up a password manager step by step

  1. 1

    Choose one and check its history

    Look at how it handled past security incidents. Response to problems tells you more than any feature list.

  2. 2

    Create a strong master password

    Several unrelated words, memorized rather than stored. This is the one password protecting all the others.

  3. 3

    Turn on two-factor authentication

    On the manager itself, first. A vault protected only by a password is a single point of failure.

  4. 4

    Import what your browser has saved

    Most managers import directly. Then remove them from the browser so there is one source of truth.

  5. 5

    Replace the reused ones that matter

    Email first, then banking, then anything storing card details. Do not attempt all two hundred accounts today.

Tips to get more out of it

  • Write the master password on paper and store it somewhere secure. Losing it can mean losing the entire vault.
  • Set up emergency access or a recovery contact if the manager offers it. Consider who needs access if you cannot provide it.
  • Check whether your accounts appear in known breaches. Most managers now flag this automatically.

Ways to mix it up

If you have a family, most managers offer shared vaults, which solves the recurring problem of household logins written on paper. If you already use one, spend the hour enabling two-factor authentication on your top ten accounts instead, which is the bigger remaining gap.

Set up a password manager: frequently asked questions

Is it safe to keep all passwords in one place?

A properly encrypted vault with a strong master password and two-factor authentication is considerably safer than reusing passwords everywhere.

What if I forget the master password?

Most managers cannot recover it by design. Write it down and store it securely, and set up any recovery option offered.

Which accounts should I fix first?

Email, because it can reset everything else. Then banking, then anything holding payment details.

Was this helpful?
Share:

Related activities