Skip to main content

The best password managers in 2020

best password manager

Using one of the best password managers will make your life both easier and more secure. You won't need to remember a unique, long, complex password for every one of your online accounts. 

Every password manager remembers your passwords for you, cutting down your risk when there's a massive data breach, and quickly generates new, strong passwords so you'll never have to reuse another one. The only password you'll need to remember is the single "master" password to the password manager itself.

Black Friday 2020 deals
Looking for a password manager? We recommend making your purchase on Black Friday. Deals will kick off earlier than ever this year — we expect those sales to start as soon as Nov. 1.

All these password managers secure your data, on your machine and in the cloud, with the toughest form of encryption in wide usage today. All have software for Windows, macOS, Android and iOS.

All can be installed on an unlimited number of devices for a single (usually paid) account and store an unlimited, or nearly unlimited, number of passwords. 

Most offer a two-factor authentication option for master passwords. But none can recover your master password for you if you forget it, although some let you reset that password to something else.

What are the best password managers?

We extensively tested several services, focusing on user experience, platform support, security and overall performance. We think the best password manager is LastPass for its ease of use, convenience, security and price.

Latest password news and alerts

— A new phishing scam pretends to be a "missed message" alert from Microsoft Teams.

— The free online game Albion Online was hit by hackers who stole usernames and passwords.

— A new phishing scam pretends to be a stimulus-check notification from the IRS.

LastPass has the best free tier of any password manager. It includes unlimited syncing across all your devices, autofilling and basic two-factor authentication (2FA). This is all most users need, and they won't have to pay a dime. 

LastPass's paid tier adds encrypted online storage, advanced 2FA, dark-web monitoring of your accounts and emergency access for your friends and loved ones. At $36 per year, it's not expensive, and the family plan covers up to six people for $48 per year.

Keeper is a close runner-up for best password manager. Its free tier won't let you sync your devices, but its inexpensive ($35/year) premium tier is a close match for LastPass. Keeper also has a tight focus on user privacy and security.

Our previous top pick, Dashlane, has a great desktop application and can change hundreds of your passwords at once. But Dashlane's free tier is very limited and its paid plan is pricey at $60/year.

1Password ($36/year), a longtime favorite of Mac users, has no free tier, but it's a strong contender if you live an Apple lifestyle. Windows and Android users who travel a lot should consider 1Password for its unique Travel Mode, which can temporarily delete stored passwords to protect them from snoopy border guards.

The best password managers you can buy today

best password manager: LastPass

(Image credit: LastPass)

1. LastPass

The best password manager overall

Platforms: Windows, Mac, iOS, Android, Linux, Chrome OS | Free-version limitations: Limited password sharing, few 2FA options | Two-factor authentication: Yes | Browser plugins: Chrome, Firefox, IE, Safari, Edge, Opera | Form filling: Yes | Mobile app PIN unlock: Yes | Biometric login: Face ID, Touch ID on iOS & macOS, most Android & Windows fingerprint readers

Feature-rich free version
Extensive two-factor-authentication options
Good, consistent design throughout
Excellent family-plan pricing
Bare-bones stand-alone desktop apps 

LastPass is our choice for best password manager because of its ease of use, its support for all major platforms, its wide range of features and its excellent free tier. 

The free version of LastPass syncs across an unlimited number of devices and has nearly as many features as the paid version, such as a password generator, unlimited passwords and secure storage. It may be all the password manager you need.

The paid version adds support for physical two-factor-authentication keys, provides 1GB of online file storage and dark-web monitoring of your accounts and gives you access to premium tech support.  The paid version's yearly price has gone from $12 to $36 in the past few years, but it's still fairly inexpensive.

You don't need to install an application on your computer to use LastPass. Instead, the software can live entirely in browser extensions and in the full-featured web interface. 

There are desktop applications for Windows and Mac, with some limits. Meanwhile,  the local-network-only LastPass Pocket option for Windows and Linux has been discontinued, as has password filling for Windows applications.

Read our full LastPass review.

Best password manager: Keeper

(Image credit: Keeper)

2. Keeper

A password manager with top-notch security

Platforms: Windows, Mac, iOS, Android, Linux, Chrome OS | Free-version limitations: Single device | Two-factor authentication: Yes | Browser plugins: Chrome, Firefox, IE, Safari, Edge, Opera | Form filling: Yes | Mobile app PIN unlock: No | Biometric login: Face ID, Pixel Face Unlock, Touch ID on iOS & macOS, Windows Hello, most Android fingerprint readers

Clean, streamlined look
Solid, no-nonsense apps, browser extensions and web interface
Very strong security
Inexpensive paid version
Doesn't autofill personal information

Keeper ($27.99 per year for Tom's Guide readers) is fast and full-featured, has a robust web interface, stores files and documents of any kind, offers perhaps the best security of any password manager and has a premium service cheaper than  both Dashlane and LastPass. Its free tier gives you everything except syncing among devices.

The trade-off for that enhanced security is a bit of inconvenience. Keeper chooses not to have a bulk password changer and it won't let you create a PIN to quickly access the mobile app. If you have an older phone that can't read your fingerprint or your face, you'll have to enter the full master password every time.

For an extra $30 per year, Keeper monitors the internet for unauthorized use of your personal data. It also offers a secure messaging service; you can get both plus the premium password manager and 10GB of secure cloud storage for $85 per year.

Read our full Keeper review.

Dashlane

(Image credit: Dashlane)

3. Dashlane

The best password-manager desktop-app interface

Platforms: Windows, Mac, iOS, Android, Linux, Chrome OS | Free-version limitations: Single device; 50 passwords max | Two-factor authentication: Yes | Browser plugins: Chrome, Firefox, IE, Safari, Edge | Form filling: Yes | Mobile app PIN unlock: Yes | Biometric login: Face ID, Pixel Face Unlock, Touch ID on iOS & macOS, some Android & Windows fingerprint readers

Intuitive interface across all platforms
Built-in, unlimited VPN service
Optional identity protection
Quite expensive
Web interface is limited

Dashlane matches LastPass in platform support and has better desktop software. Its killer feature remains the bulk password changer that can reset hundreds of passwords at once, although the sites that support it aren't the best-known.

The password manager is well designed, easy to use and excellent at filling out your personal information in online forms. A scanner goes through your email inbox to find online accounts you may have forgotten about. 

Dashlane's drawback is its high price. Its Premium plan is $60 per year, while Dashlane's free plan is limited to 50 sets of credentials and won't let you sync among devices.

On the upside, the Premium plan has dark-web monitoring and unlimited VPN service. The Premium Plus plan ($120 per year) adds credit monitoring, identity-restoration assistance and identity-theft insurance at bargain rates. All together, these non-password-management features may justify the high prices.

Read our full Dashlane review.

1Password

(Image credit: 1Password)

4. 1Password

Best for Mac and iOS users

Platforms: Windows, Mac, iOS, Android. Linux, Chrome OS, Darwin, FreeBSD, OpenBSD | Free-version limitations: No more free version | Two-factor authentication: Yes | Browser plugins: Chrome, Firefox, Safari, Edge, Brave | Form filling: Yes | Mobile app PIN unlock: Yes | Biometric login: Face ID, Pixel Face Unlock, Touch ID on iOS & macOS, Windows Hello, most Android fingerprint readers

Travel Mode keeps out prying eyes
Strong organizational tools
Secret Key encryption
Weak mobile experience
Outdated design on desktop

1Password provides a better experience on Mac and iOS users than on Android or Windows users, but the design and user interface seem outdated on all the desktop and mobile apps. 

However, 1Password's browser extensions for Brave, Chrome and Firefox, dubbed 1Password X, are great. They improve upon the desktop experience and work directly with web browsers instead of operating systems. They also extend 1Password to Chromebook and Linux users, although a beta version of a 1Password Linux application recently became available.

1Password's killer feature is a Travel Mode that deletes sensitive data from your devices (you'll get it back later) so that snooping border-control agents can't find it. 1Password also has great form-filling abilities and true two-factor authentication.

1Password asks new users to sign up for a $36 yearly cloud subscription, although for $65, Mac users can buy the older stand-alone application that lets them sync devices locally. Alas, the limited free version of 1Password has been discontinued.

Read our full 1Password review.

RoboForm

(Image credit: RoboForm)

5. RoboForm

Basic, but reliable and inexpensive

Platforms: Windows, Mac, iOS, Android, Linux, Chrome OS | Free-version limitations: Single device; no 2FA | Two-factor authentication: Yes | Browser plugins: Chrome, Firefox, IE, Safari, Edge, Opera | Form filling: Yes | Mobile app PIN unlock: Yes | Biometric login: Face ID, Touch ID on iOS & macOS, Windows Hello, Pixel Face Unlock,most Android fingerprint readers

Robust form filling
Relatively inexpensive
Attractive mobile apps, web interface
Unintuitive desktop apps
Features don't match top rivals

RoboForm has been around since 1999, but its recently overhauled web interface and mobile apps are modern and responsive. The desktop app still feels a bit clunky, yet retains RoboForm's famously excellent form-filling.

RoboForm offers quite a few features, such as password sharing, two-factor authentication and a password generator. Their functionality is a bit limited compared to some other password managers, but they'll do the job. 

The free tier works well and includes most RoboForm features. However, it won't sync across multiple devices. At a list price of $24 per year (plus a 30% discount for Tom's Guide readers), RoboForm's premium version is cheaper than almost every other password manager, and may be just the thing for someone seeking the basics at a budget price.

Read our full RoboForm review.

Blur

(Image credit: Blur)

6. Blur

OK at managing passwords, great at protecting privacy

Platforms: Windows, Mac, Linux (via browsers); Android, iOS | Free-version limitations: Single device; fewer privacy features | Two-factor authentication: Yes | Browser plugins: Chrome, Firefox, Internet Explorer, Opera, Safari | Form filling: Yes | Mobile app PIN unlock: No | Biometric login: Face ID, Touch ID on iOS, most Android fingerprint readers

Unique privacy-protecting features
Strong autofill support
Unreliable password import
Poor mobile app experience
Expensive for a password manager

Blur is a privacy-protection service with a password manager tacked on. It's fine as a browser-based desktop password manager, but it's a bit expensive compared to  LastPass, Keeper or 1Password. And its mobile apps are out-of-date and hard to use.

What Blur excels at is keeping your data private. It offers one-time-use credit-card numbers for online purchases, different email addresses for every online service you sign up for, and even a second phone number for when you don't want to reveal your real one.

You get all that for $39 per year with Blur's basic premium plan, although you have to pay a small fee for every one-time-use credit number. Those fees disappear with the $99 unlimited premium plan. (Each paid plan can be tried free for 30 days.) The free tier is pretty bare-bones, with few privacy features and no syncing across devices.

If you just want a good password manager, there are better and cheaper options. But if online privacy is your chief concern, then Blur is definitely worth considering.

Read our full Blur review.

KeePass

(Image credit: KeePass)

7. KeePass

Great -- if you're highly technical

Platforms: Windows, Mac, Linux; unofficial Android, iOS, Chrome OS ports | Free-version limitations: None; it's all free | Two-factor authentication: Via plugins | Browser plugins: 3rd-party extensions for Chrome, Firefox, Internet Explorer, Opera, Safari | Form filling: Yes | Mobile app PIN unlock: Depends on 3rd-party app | Biometric login: Via plug-ins

Completely free & open-source
Gives you total control of data
Runs on almost anything
Very unintuitive
Third-party Android, iOS apps

KeePass may be the most powerful and customizable password manager around, and it's entirely free. But you'll have to put a lot of the pieces together yourself.

The core KeePass desktop application is written for Windows and runs on Mac or Linux with a bit of tweaking. Syncing among devices is up to you: You can use Dropbox, OneDrive or similar online accounts, or you can share files on your local home network. 

Likewise, you can choose among several third-party apps for Android, iOS, Chrome OS or other platforms, as well as third-party browser extensions. These daunting tasks are made easier by more than 100 plug-ins and extensions that bolt onto KeePass. 

There is definitely a bit of a learning curve to KeePass, and the average user may want to stick to one of the easier-to-use password managers. It's best for those who are technically minded and enjoy a bit of a challenge. 

Read our full KeePass review.

Other password managers

We aren't able to every worthwhile password manager every year. Following are a couple that are well worth considering even if we reviewed them some time ago, plus one that we've reviewed again recently and found that we can't quite recommend.

Best password manager: Enpass

(Image credit: Enpass)

Enpass

Not bad for $12 a year

Platforms: Windows, Mac, iOS, Android, Linux, Chrome OS | Free-version limitations: 25 items on mobile; no biometric login on desktop | Two-factor authentication: No | Browser plugins: Chrome, Firefox, Safari, Edge, Opera, Vivaldi | Form filling: Yes | Mobile app PIN unlock: Yes | Biometric login: Touch ID on iOS & macOS, Windows Hello, most Android fingerprint readers

Strong free desktop version
Easy to keep your data offline
Limited features and syncing options
No two-factor authentication

Enpass has strong, unlimited free desktop applications for Windows, Mac and Linux, but its free mobile apps for Android and iOS are limited to 25 passwords. 

Unlimited coverage on all devices costs $7.99 for 6 months, $11.99 for a year or $57.99 for a one-time lifetime purchase. 

Enpass handles the basics well, but you'll have to sync your own devices via Dropbox, OneDrive or a similar service, as Enpass doesn't offer any cloud-syncing of its own. (Some users might see that as a security advantage.)

The Enpass desktop interface is a bit spare, but functional; the mobile apps are sleek. All handle biometric logins to some extent. 

Enpass doesn't advertise a local-sync feature, but you could create one with USB drives or a bit of network sharing. That might make the service ideal for users who are wary of putting their data online. Overall, Enpass belongs on our best password managers list, but it's not our top pick.

Read our full Enpass review.

Best password manager: Zoho Vault

(Image credit: Zoho)

Zoho Vault

Totally free for individual use

Platforms: Windows, Mac, iOS, Android, Linux, Windows Phone | Free-version limitations: No sharing | Two-factor authentication: Yes | Browser plugins: Chrome, Firefox, Safari | Form filling: No | Mobile app PIN unlock: Yes | Biometric login: Touch ID on iOS, most Android fingerprint readers

Solid free offering
Inexpensive family plan
No form filling
Bare-bones mobile apps
Poor handling of Google login

Zoho Vault is part of a larger suite of paid enterprise tools, but the company makes its password manager free for individual personal use. Group plans that can be used by families start at $12 per user, per year.

You won't get consumer-friendly features such as personal-data form-filling or a bulk password changer with Zoho Vault, but all of the essentials are in place and work smoothly.

Zoho Vault does the password syncing for you using its own servers, and there's no fee to sync all your desktop, laptop and mobile devices. 

The only drawbacks are that Zoho Vault sometimes tripped over Google's two-page logins in our testing (Zoho representatives tell us that's been fixed) and that the free version of LastPass does even more.

Read our full Zoho Vault review.

True Key

(Image credit: McAfee)

True Key

Once promising, but now a has-been

Platforms: Windows, Mac (both through browser extensions), Android, iOS | Free-version limitations: Single device; 15 passwords max | Two-factor authentication: Yes | Browser plugins: Chrome, Edge, Firefox | Form filling: None | Mobile app PIN unlock: No | Biometric login: Face ID, Touch ID on iOS, Windows Hello, most Android fingerprint readers

Inexpensive
Extensive multi-factor authentication
Hasn't been updated in years
Limited features
Useless free version

True Key was one of the most impressive and futuristic password managers of 2015, with an appealing, user-friendly interface, strong support for biometric logins and multi-factor authentication.

The problem is that True Key has barely been updated since then, and other password managers have passed it by. Even its $20 yearly subscription price hasn't changed.

The features True Key does have, including note-taking and ID record-keeping, work well, although its Mac and Windows desktop apps have been replaced with browser interfaces. The mobile apps do a good job. 

Unfortunately, the free tier is next to useless, as it permits only 15 password entries, and True Key's developers never seem to have gotten around to adding form-filling.

True Key is often bundled with McAfee antivirus software, and if you get it that way, it's perfectly fine to use. But it's not worth paying for when the free version of LastPass beats it by a mile.

Read our full True Key review.

How to choose the best password manager for you

Most of these password managers have the same essential functions. But things differ when you get to their extra features. 

Some of these password managers, such as Dashlane, 1Password and Keeper, alert you to the latest data breaches, sometimes for an extra price. Many offer to save your personal details, credit-card numbers and other frequently used information so that they can quickly fill out online forms for you. (It's safer than letting retail websites save your credit-card information.) 

1Password's Mac and iOS apps have generally been kept more up-to-date than in its Android and Windows applications. It may be the best choice if you use exclusively Apple devices, but the other password managers work just fine across all platforms.

The biggest decision to make is whether you want your passwords to be stored locally on your own computers and mobile devices, or in the cloud on someone else's servers. There are pros and cons to each approach.

Cloud vs. local management

1Password gives you an option to store and sync your "vault" of passwords and other sensitive information locally (in other words, only on your own devices) without using the service's cloud servers. (LastPass has ended its Pocket option that did so too.)

For KeePass, local sync is the default solution, but setting up your Dropbox, iCloud or other account to sync online is not hard. The third-party cloud-account option is standard for Enpass, although it plans to add a local-sync feature.

There's a security advantage to syncing your passwords locally because none of the data needs to reach the internet. If you want to maintain total control, this is the way to go. 

The downside is that it can be a hassle to synchronize the passwords on all of your devices. Some services let you do so over a local network, such as a Wi-Fi network. You could also put the password vault on a USB stick and walk it from one computer to another.

Far more convenient are cloud-based password managers. These services keep encrypted copies of your vault on their own servers, ensure that all your devices are always synced and encrypt the transmissions between your devices and their servers.

The risk, though small, is that one of the cloud-based services could be breached and your passwords released out into the wild. (LastPass has had a few documented security issues, all of which were quickly fixed, without losing any passwords.)  

If a password manager is doing its job right, it's storing all your passwords in encrypted format, and storing your master password only as a "hash" that's the result of an irreversible mathematical process.

Whether it's local or cloud-synced, a password manager puts all your eggs in one basket, so to speak, unless you use more than one password manager. But for most people, the demonstrable security benefits of using a password manager far outweigh the disadvantages.

  • Paul Wagenseil
    Archived comments are found here: http://www.tomsguide.com/forum/id-3366251/password-managers.html
    Reply
  • tslifkin
    Be aware that some of these tools do NOT store passwords on your device and so you CANNOT see them if you are not online. OK if you live at work or at home always connected. No so much if you travel or move around a lot. Keeper JUST CHANGED THEIR DESIGN. You can still see your passwords when not connected, but you CANNOT EDIT. so you cant add new data or do any editing if, for example, you are on long flight or a location without an inmediate link. This is a BAD THING and indicative of companies taking the easy way out to get your cash but reduce the meaningful feature sets! Just be careful!
    Reply
  • edwardmeijers
    Why is safe in cloud not compared?
    Reply
  • google02
    You are wrong to imply that 1Password is not available for Windows as of 2018. My hosting company uses 1Password internally. It should be included in your comparative review.
    Reply
  • merytsekhmet
    I had a premium account with LastPass for about 5 years. This week I unsubscribed after hearing they were killing off XMarks. I was particularly disgusted because the news was sent very shortly after they renewed the joint subscription. Happily though, I am far more satisfied with Dashlane and Eversynch so LastPass did me a favour in the end.
    Reply
  • jslezak57
    I purchased Dashlane only to find out that it doesn't have full functionality in MS Edge (default browser windows 10). It wanted to force me to use Chrome or IE. I tried to use the online chat, only to hear that "the software will improve with time". I requested a refund because when I purchase a software app, I want something fully functioning - not a "beta" that leaves me with partial functionality!
    Reply
  • merytsekhmet
    20951584 said:
    I purchased Dashlane only to find out that it doesn't have full functionality in MS Edge (default browser windows 10).

    I refuse to use Edge even though it is among the bloatware that came with Windows 10. I use Firefox and Chrome and have had no problems.

    Reply
  • hokfujow
    I'm amazed that Lastpass is still getting such high ratings. Go on their forum and read the thread in troubleshooting about not saving passwords. Lastpass does not reliably save new passwords entered for web accounts. People create new accounts, use LP to generate a new password, and then discover that it wasn't saved and they have no idea what the password for their new account is. It's been happening to me more often than not. I'm not going to renew my premium account, and switching to something else.
    Reply
  • vsneers
    20959340 said:
    I'm amazed that Lastpass is still getting such high ratings. Go on their forum and read the thread in troubleshooting about not saving passwords. Lastpass does not reliably save new passwords entered for web accounts. People create new accounts, use LP to generate a new password, and then discover that it wasn't saved and they have no idea what the password for their new account is. It's been happening to me more often than not. I'm not going to renew my premium account, and switching to something else.

    I 100% agree with this. I used LP for around 2 years with Chrome and found it would constantly not update any changed passwords in the vault properly and so seeing as I used LP to generate the password in the first place and it then didn't save it or saved a messed-up version of it that just contained a bunch of dots, I would end up generating a password, copying and pasting it to Notepad and then manually adding it to the vault at which point I thought what is the point of LP, I might as well do this myself and save me the money.

    Plus a recent major security breach causing all my passwords and banking details to be hacked by someone and the lack of support from LP, was the last straw for me. If someone does try to access your account with them then they don't actually stop the person, they just send you an email or notification on your phone telling you but do nothing about it to block them. This happened to me overnight while I was in bed and unable to respond to the notifications and despite the hacker using an entirely different IP address and location (their IP address even said it was from IPVanish.com), they did nothing to block their access and due to the hacker having access to my email account, they were then able to request a password and login email reset from LastPass who duly obliged. I spent the next couple of days desperately trying to get in contact with LastPass as I was locked out of my own account and all they did was send me links to articles about either changing your password or if your email address was compromised, suggesting to just set up a new account and start again changing passwords. Meanwhile the hacker still had full access to my account!

    As hokfujow says, their forum is full of people complaining about the service and they never seem to respond to the posts. I'm amazed how they still get to the top of most recommended password manager lists.
    Reply
  • redneck1st
    Mr Waenseil talks out of both sides of his mouth. He gives Roboform 5/5 then talks negatively about the program and all it's short comings. You cant have it both ways Paul. It's either a good product or it's not. It cant be both.
    Reply