This post contains affiliate links. If you buy through them, Securely Sorted may earn a commission at no extra cost to you. Learn more.
Setting up a password manager sounds like a weekend project. It isn’t. You can get the important part done in about 15 minutes, then let it fill in the rest as you go about your normal day.
Before you start
Pick a password manager. If you’re unsure, read Password Managers Explained. Good starting points: 1Password, NordPass, or Proton Pass if you’d like to start free.
Step 1: Create your account and master password (3 minutes)
Your master password is the one password you’ll still need to remember, so make it strong and memorable. A good method: four or five random words strung together, like copper-violin-harbor-pancake-seven. Long beats complicated.
- Don’t reuse it anywhere else.
- Write it down once and keep it somewhere safe at home until you’ve memorized it.
- Save any recovery kit or emergency code the app gives you.
Step 2: Turn on two-step login (2 minutes)
In the app’s security settings, turn on two-step verification using an authenticator app. Now even someone who guessed your master password couldn’t get in.
Step 3: Install the apps (3 minutes)
Install the browser extension on your computer and the app on your phone. On your phone, turn on autofill (on iPhone: Settings, then Passwords, then Password Options; on Android: Settings, then search “Autofill service”).
Step 4: Import your saved passwords (3 minutes)
Most password managers can import passwords saved in Chrome, Safari, Edge, or Firefox. Look for “Import” in the app. Once imported, turn off your browser’s built-in password saving so you don’t end up with two lists.
Step 5: Fix your five most important accounts (4 minutes)
Don’t try to change every password today. Start with the accounts that would hurt most if someone got in:
- Your main email (it can reset everything else)
- Your bank and payment apps
- Your phone carrier account
- Amazon or other shopping accounts with saved cards
- Your social media
For each one, use the password generator to create a new, unique password, and turn on two-step login if you haven’t.
After today: let it work for you
Whenever you log in somewhere, the password manager will offer to save or update the password. Over a few weeks, your whole list gets cleaned up without a big project. Check the app’s password health report once a month to fix any weak or reused ones.
One thing worth doing right away: once you’ve imported your old passwords, go back into your browser’s settings and clear out the saved passwords there too. Otherwise you end up with two out-of-sync copies, and it’s easy to forget which one is current.
Common questions
What if I forget my master password? Use the recovery kit or emergency code you saved in Step 1. This is why that step matters.
Can my family use it? Most offer family plans with shared vaults, so you can safely share streaming or utility logins.
What about passkeys? When a site offers a passkey, accept it. Your password manager can store it, and passkeys can’t be phished.