How to Use a Password Manager (Built-In vs Third-Party)

A password manager saves your logins, creates strong unique passwords and fills them in for you, so you only have to protect one account. If you use only Apple devices, the free Passwords app is built in; if you use Android and Chrome, Google Password Manager is free and already there. If your household mixes iPhone, Android and Windows, a third-party password manager that runs everywhere is usually the smoothest choice.

Whatever you pick, the steps are the same: choose a manager, secure it, bring in your existing passwords, then gradually replace weak and reused ones.

Built-in vs. third-party: which should you use?

	Apple Passwords	Google Password Manager	Third-party apps
Cost	Free	Free	Free tiers exist; full plans usually a few dollars a month
Works on	iPhone, iPad, Mac, Vision Pro; Windows through iCloud for Windows	Android, Chrome on any computer; Chrome on iPhone	Most phones, computers and browsers
Unlock with	Your Apple device passcode, Face ID or Touch ID	Your Google account and device screen lock	A master password, plus biometrics
Passkeys	Yes	Yes	Most major apps
Sharing	Shared groups with your contacts	Family group (up to six people)	Shared vaults, often for any user of the same app
Best for	All-Apple households	Android and Chrome users	Mixed devices, extra features

All three approaches are far safer than reusing passwords or keeping them in a notes app. The “best” one is the one you’ll actually use on every device.

How to start with Apple Passwords

The Passwords app comes with iOS 18, iPadOS 18, macOS Sequoia and later. It replaces the older Settings > Passwords screen and stores passwords, passkeys, verification codes and Wi-Fi passwords.

Open the Passwords app. If you don’t see it, search for it, since it’s part of the system.
Make sure syncing is on: Settings > [your name] > iCloud > Passwords (labels can vary by iOS version).
Turn on autofill: Settings > General > AutoFill & Passwords, then enable AutoFill Passwords and Passkeys.
Check the Security section of the app for passwords that are reused, weak or found in data leaks.

On a Windows PC, you can use your Apple passwords through the iCloud for Windows app and its browser extension. Apple’s Passwords user guide covers the details.

How to start with Google Password Manager

On Android, open Settings and search for Google Password Manager, or go to passwords.google.com on any browser.
In Chrome on a computer, sign in to Chrome with your Google account and turn on sync for passwords.
On Android, make Google your autofill service: open Settings and search for autofill (often under Passwords, passkeys & accounts), then select Google.
Run Password Checkup in Google Password Manager to find compromised, reused and weak passwords.

On an iPhone, you can use Google Password Manager by installing Chrome and selecting Chrome under Settings > General > AutoFill & Passwords.

If you choose a third-party app

Stick to well-known, actively maintained password managers with a long security track record, and download them only from the official App Store, Google Play or the company’s own website. Look for:

End-to-end encryption, where the company can’t see your vault
Apps for every device and browser you use
Passkey support
Published independent security audits
Two-factor authentication on the account itself

Then set it as your autofill provider: on iPhone in Settings > General > AutoFill & Passwords, on Android in the autofill settings mentioned above.

How to pick a strong master password

Built-in managers use your device passcode and account. Third-party apps usually need a master password, and it’s the one password you must remember.

Use a passphrase of four or more random words, such as a made-up phrase only you would know. Length matters more than symbols.
Never use it anywhere else.
Write it down on paper and keep it somewhere safe at home until you’ve memorized it. Don’t save it in a note on your phone.
Turn on two-factor authentication for the password manager account, and store its recovery kit or codes safely. Our guide to two-factor authentication explains the options.

How to move your passwords into a new manager

Export from the old one. Most managers and browsers can export a CSV file (a spreadsheet). In Chrome, go to passwords.google.com or Chrome’s password settings and choose Export. On a Mac, open Passwords and choose File > Export All Passwords to File.
Import into the new one using its import tool. Google Password Manager has an Import option in its settings; Apple’s Passwords app on Mac has File > Import Passwords.
Delete the CSV file right away, and empty the trash. It contains every password in plain text.
Some managers now support a direct, encrypted transfer between apps instead of a CSV. Newer Apple software includes this option for compatible apps, but support varies, so check both apps.
Once everything is in the new manager, turn off password saving in the old browser or app so you don’t end up with two out-of-sync copies.

Never email or upload an exported password file, and don’t do the export on a shared or public computer.

Fix your weakest passwords first

You don’t need to change everything in one sitting. Use the manager’s security report and work in this order:

Your main email account
Banking, payment and investment accounts
Your Apple, Google or Microsoft account
Any password flagged as leaked. See what to do if your email was in a data breach.
Shopping and social media accounts

Where a site offers it, replace the password with a passkey; your password manager can store those too.

How to share passwords safely

Apple Passwords: tap the + button and choose New Shared Group, then add people from your contacts. Everyone needs iOS 17, iPadOS 17, macOS Sonoma or later.
Google Password Manager: open a saved password and choose Share to send a copy to someone in your Google family group.
Third-party apps: most offer shared vaults or family plans.

Any of these beats texting a password, which leaves it sitting in message history.

Bottom line

Use the password manager that covers all your devices: Apple Passwords for an all-Apple setup, Google Password Manager for Android and Chrome, or a reputable third-party app for a mix. Protect it with a strong passphrase or device passcode plus two-factor authentication, import your old passwords, delete the export file, and fix your most important accounts first.

FAQ

Is it safe to keep all my passwords in one place?

For most people, yes. A reputable manager encrypts your vault, and a unique password for every site is much safer than reusing a few passwords you can remember.

What if I forget my master password?

Many third-party managers can’t reset it for you because they can’t see your data. Set up the recovery options they offer, such as a recovery kit or trusted contact, before you need them.

Should I let my browser save passwords?

Chrome’s built-in saving is Google Password Manager and is a reasonable choice. Just pick one manager and stick with it to avoid duplicate, outdated entries.

Do password managers work with passkeys?

Yes. Apple Passwords, Google Password Manager and most major third-party apps can store and sync passkeys.