Free password managers used to mean a crippled demo: ten entries, one device, no export. That has changed. A genuinely usable free tier now exists, and for most people it is enough. What still differs is how your vault is encrypted, whether you can audit what is inside it, and whether it opens on a phone, a laptop and a borrowed work computer. Here is how the main options compare, and which one fits the way you actually work.
Brand recognition matters less than these four properties.
Free tiers are funded by paid upgrades or donations. That is fine. Just know which features sit behind the paywall before you migrate your whole digital life into one.
Bitwarden's free plan is where most people should start. It is open source, its clients have been independently audited, and the free tier gives you unlimited passwords on unlimited devices with sync between them. The browser extension and mobile apps are quick, the generator is flexible, and passkeys can be stored next to the logins they belong to.
What you give up: the built-in one-time-code generator, deeper vault health reports, and emergency access for a trusted contact all sit in the paid tier, and sharing with another person is limited. None of that breaks everyday use.
Two things on day one. Turn on two-step login for the Bitwarden account itself, using an authenticator app or a hardware key rather than email alone. Then write your master password on paper and store it somewhere physically safe. Losing it means losing the vault, and that is the feature, not the bug.
KeePassXC keeps everything in a single encrypted file on your own disk. No account, no server, no subscription, and the file format is open and well documented.
Choose it if you are comfortable managing files, want nothing stored in someone else's cloud, or handle credentials you would rather not sync at all. For a household that forgets to sync, it is the wrong tool.
Proton Pass gives free accounts unlimited logins and unlimited devices, plus a tidy extension and mobile app. The draw is aliasing: you create email addresses that forward to your real inbox, so a breached shop never learns your actual address. Free accounts get a limited number of aliases, and heavy users will hit that ceiling.
It fits naturally if you already use Proton Mail, since aliases and logins live in one account. Encryption is zero-knowledge and vault sharing is paid. As a straight alternative to Bitwarden it is close; as an ecosystem play, it is better than most.
Apple's Passwords app and Google Password Manager are free, pre-installed and more competent than their reputation suggests. They generate strong passwords, fill them automatically, sync across your devices, and offer some alerting for weak or leaked credentials.
Their limits are structural. Apple's works best inside Apple's world; Google's works best inside Chrome and Android. Moving between ecosystems is possible but clumsy, sharing outside your own accounts is awkward, and neither gives you the granular control of a standalone vault. If you are committed to a single platform and will never switch, they are a fine starting point. If you move between Windows, Linux, Android and iOS, install something purpose-built.
Keeper, NordPass and Dashlane all have free tiers, and all of them are shaped to push you toward a subscription. Expect limits like a single device at a time, a cap on stored items, or no sync at all. The paid versions are solid products, but the free versions are demos. Compare them only if a specific feature, such as family sharing or dark-web monitoring, is what you actually need.
Whichever you pick, the routine is the same. Install the extension and the mobile app before you import anything. Export your passwords from the browser, import them, then delete the exported file properly — a CSV containing every password you own is the most dangerous file on your disk.
Then work through the vault weakest-first. Change reused passwords on your email, your bank and anything holding payment details before you touch a forum login. Email comes first, always, because it is the reset route for everything else. Turn on two-factor authentication for those same accounts and store the recovery codes inside the vault rather than in a screenshot folder.
Finally, test the recovery path while it is still easy. Log out on one device and back in. Check that someone in your household could find your written master password if they needed to. A vault nobody can open is worse than the notebook you are replacing.
Photo: tookapic / Pixabay
