Passwords: Why a Password Manager Beats Your Memory

The 30-second explanation

Instead of reusing one password everywhere, a password manager creates and remembers a unique one for each site. You only remember one strong password: the master.

How it works

1. 1

   1. Create a master

   Choose one long, memorable passphrase.

2. 2

   2. Generate

   The manager creates a unique password per account.

3. 3

   3. Store

   Everything is kept in an encrypted vault.

4. 4

   4. Autofill

   It fills logins only on the matching site.

The main danger with passwords is reuse. If one website leaks your password and you used it elsewhere, attackers try it everywhere. A password manager removes the need to reuse: it generates long random passwords, stores them encrypted, and fills them in for you. Because it fills only on the correct website, it can also quietly warn you when a page is a fake. Turn on multi-factor authentication for the manager itself.

Real-world example

How to spot it

• Reused passwords

  The same password on more than one site is the biggest risk.

• Short or predictable passwords

  Names, dates and keyboard patterns are easy to guess.

• Autofill that does not appear

  If your manager will not fill, the site address may be a lookalike.

• Passwords in notes or spreadsheets

  Plain-text lists are easy to steal.

What to do

1. 1Pick a reputable password manager and move your most important accounts (email first) into it.
2. 2Use a long passphrase as the master password, and turn on MFA for the manager.
3. 3Replace reused passwords gradually, starting with email, banking and work accounts.