You probably have a lot of online accounts, and in order to remember your login details you are quite likely to reuse those same few passwords over and over again. Perhaps you even have a document with them all in. It’s perfectly understandable, but definitely not safe.
We know that it’s important to use an original password for each account and update them on a regular basis, but it can be a Herculean task trying to retain that information in our heads. This is made even more challenging with different sites requiring specific mixtures of characters: this one demands at least two symbols and no capitals, while that one requires a mixture of cases and a minimum length. And then you have to change yet another password and feel like crying!
That’s where password manager apps come in. They allow users to create one master password, after which the app takes care of logging into all other accounts. They even make recommendations for really secure passwords. Having only a single login to remember? That sounds good to us.
How password managers work
The idea of password managers is to simplify the way you access your various accounts. Instead of having to memorize multiple complex passwords for each of the services you use you need only recall one password – or provide a fingerprint or Face ID – and the password manager will automatically fill in the required details for you. Just remember this is only as safe as the password you use to unlock access to all your passwords – so don’t lock them all behind an easy-to-guess password, like your pet’s name.
The password managers also offer various other features. For example, they can generate random, highly secure passwords for your accounts, they can warn you if your password has been compromised, and some can advise you about existing insecure passwords and support your efforts to update them.
Obviously, security is a high priority—as the manager apps have the virtual keys to your kingdom—which is why all of the options listed below use high-grade encryption to protect your details.
Many also feature digital wallets so your bank details can be safely stored and used to make purchases online without having to root around in your pocket or bag for the card number and expiry date.
These services don’t usually come for free, but many offer trials so you can see if it’s the solution for you. After that you’ll need to pay a small monthly fee, but we think that’s a price worth paying for only having to keep one password in your brain.
Do you need a password manager? Is iCloud Keychain enough?
But do you need to buy a password manager when there is one in macOS, iOS and iPadOS? Apple provides iCloud Keychain, which will generate secure passwords and enter them for you automatically, all while storing them securely.
iCloud Keychain is incredibly useful, but it’s a bit basic and lacks some of the features offered by other password managers.
So, if you want to stay safe without having to recall hundreds of passwords, but want more control and features than you get from Apple’s free offering, here’s some of the best alternatives available for Mac, iPhone and iPad users.
For more ways to keep your data safe be sure to also read our Best Mac security tips article.
Best Password Managers for Mac and iPhone
iCloud Keychain
You may be wondering if you really need a password manager as Apple already includes a free one that works with your Mac, iPhone, iPad and any other Apple device linked to your Apple ID.
iCloud Keychain is Apple’s password management system and it is built into macOS and iOS. It helps you to create secure passwords by generating them on your behalf, warns you if you reuse one or if a password is not secure, and auto-fills your passwords when needed. It’s all tied to your Apple ID login and password and the Apple devices you have registered for two-factor authentication, plus everything is encrypted, so it should be secure.
It doesn’t just fill in passwords for you though: it also enters your logins, emails, credit card numbers, and address details. So you can effortlessly go to sites, choose the item you want to buy, then complete the transaction in seconds and without needing to dredge your memory or fill in loads of text boxes first.
One of the main disadvantages in the past was that iCloud Keychain was restricted to Apple devices and Safari. However, Apple has since added Keychain support via a iCloud Password extension for Edge or Chrome, and the good news for PC users is that this means they can use iCloud for Windows. However, if you have an Android phone iCloud Keychain is redundant and you will need to find your password information and enter it manually (you can look up your passwords in your keychain in Settings > Passwords).
Another frustration we have with iCloud Keychain is that in our experience when we pick a iCloud Keychain suggested password it doesn’t always store it. After years of use our iCloud Keychain is confusingly cluttered with multiple password versions per account.
iCloud Keychain is pretty much a solution for those who only use Apple devices and software. Luckily there are alternatives if you want a little more room to move.
1Password
One of our long-standing favorites is 1Password which has a nice, clean layout and is simple to use. As well as storing and autofilling your passwords it can store other important document information, such as your driver’s licence and passport.
The app comes with the standard vault that you access via a master password, and in which you can see and update your various account login details. It also supports Touch ID and Face ID so you don’t have to enter the password every time you log into the app. There’s a section that includes accounts that can use a passkey.
Security is front and center, with 1Password boasting AES end-to-end encryption so only you will hold the key to your account. AES 256-bit is the order of the day, and 1Password monitors the activity on your account so it can send you warnings if any odd behavior is spotted. It also uses the Secure Remote Password (SRP) protocol, which allows you to authenticate your details to a site without the information being sent to a server which could compromise security.
The Watchtower feature analyzes the overall strength of your online security and warns you if passwords are repeated or vulnerable.
A free 14-day trial is available, but after that, you’ll need to move on to a paid subscription that currently starts at $36 (approx £29) per year. For this, you’ll be able to use the software on as many devices as you like, including macOS, Windows, ChromeOS, and Linux, plus the accompanying iPhone and Android apps.
1Password has won numerous awards and is an easy service to recommend.
Read our full 1Password review
Dashlane
Dashlane is a popular password manager, with a comprehensive suite of tools to make your life a lot easier.
The app analyses your current passwords to see how secure they are and gives you an overall rating based on how often you reuse login details for multiple sites. Password monitoring will check if any of your details have been exposed in data breaches or have been reused too many times. There’s also a feature to auto-replace passwords instantly with ones generated by Dashlane.
It’s not only your account details that you can store in Dashlane, you can store bank details, your address and important documents like your passport and driving licence. There’s also a section for any secure notes you wish to keep safe.
All your transactions between the app and sites are end-to-end encrypted using 256-bit AES technology. There’s also 2-factor authentication available, with the Dashlane app acting as an authenticator,
Dashlane is available on a wide range of platforms, with dedicated apps for iOS/iPadOS and Android, plus extensions for Chrome, Safari, Edge and Firefox.
Dashlane costs $39.96 (approx £32) per year for the individual account. There is a free tier available, which acts as a taster for the full package, and you can use it indefinitely, but with a limit of only 25 passwords.
Read our full Dashlane review
NordPass
One of the newest additions to the password manager arena is NordPass, which is made by the same fine fellows at NordVPN. The latter is one of our favorite VPNs, as you’ll see from our Best VPN for Mac roundup.
NordPass offers full desktop apps for macOS, Windows, and Linux, plus the standard iOS and Android offerings. You can also use NordPass through browser extensions for Chrome, Firefox, Opera, Brave, Edge, and Safari.
NordPass has all the features you’d expect from a modern password manager, with quick importing of existing passwords from other services, zero-knowledge architecture, local encryption, 2-factor authentication, password generation, secure storage for credit details and notes, autofill for logging into accounts, folders to store passwords for work, home or other classifications, security monitoring for password hacks, support for biometrics, plus a neat interface to manage all of your various data.
There’s a free feature-limited version. Prices start at $$71.76/£28.68 (currently $35.76 for two years, or £19.08 for one year) for the Premium plan. The free tier supports unlimited passwords, stores credit card details, and secure notes, plus has the ability to sync across all your devices. The main drawback is that you can only be logged into one device at a time. But if you can work with that it’s a service you should definitely investigate.
Bitwarden
When it comes to technology, we often say that you get what you pay for, but in the case of Bitwarden, this isn’t quite true. The service offers a really impressive range of capabilities on its free tier, so with this app, you get what you don’t pay for!
Without signing up for a premium account you get unlimited storage for passwords, credit cards, notes, and online account IDs, secure text messaging with individuals, a secure password generator, two-factor authentication, plus the ability to either have your data stored on the Bitwarden servers or one you host yourself. Oh, and you can sync all your devices, rather than the single one offered by most other free tiers.
Should you want to expand the features, then the Premium tier costs $10 (approx £8) per year and adds secure file sharing, 1GB of encrypted file attachments, additional two-factor authentication options, password safety analysis, and access to your account by family if you die or become sick.
Encryption is high-grade stuff, with Bitwarden deploying end-to-end AES-256 bit encryption, salted hashing, and PBKDF2 SHA-256, all of which are down locally on your machine.
Apps are available on a wide range of platforms, including macOS, Windows, Linux, pretty much every browser you can think of, Android, and iOS, and there’s even a secure web version if you find yourself without your device.
If you’re looking for value when it comes to password managers, it’s very hard to look past Bitwarden.
Keeper
Keeper can store unlimited passwords, auto-generate strong new ones, and sync passwords across multiple devices, all while holding credit card details and other important payment details in its secure vault.
AES 256-bit encryption is all performed locally, so Keeper can never know your details, but there is the option to securely share folders and passwords with friends and family if they need to access any of your accounts. The included secure messaging service is also useful for communicating these requests
There’s also support for Touch ID on the Mac and iPhone, with the latter also working with Face ID, plus Apple Watch compatibility and the option of using two-step authentication.
Keeper Unlimited Password Manager is available from $34.99/£24.99 per year, but there is a free tier that is limited to one device and ten passwords.
Enpass
Those looking for a simple, secure solution that doesn’t break the bank would do well to consider Enpass.
The macOS client is completely free, but if you want to add the same features to your iPhone or Android device then you’ll need to move to the Enpass Premium tier that costs $23.99/£19.49 per year. If you prefer to buy a lifetime license, you can pick one up for $99.99/£82.99.
Enpass doesn’t store any of your information on its servers. Instead, everything is encrypted and kept on your personal device so you never lose control of your data. Details can be synced securely via iCloud, Dropbox, OneDrive, Google Drive, Box, or ownCloud/WebDAV, to keep all of your devices in step.
You still have the classic features of other password managers, such as auto-fill forms, security analysis of your passwords and generating complex replacements easily, secure storage for sensitive information, and AES 256-bit encryption, plus support for iOS, Android, and Apple Watch devices.
There are plenty of fine-tuning options for those who are a little bit more hands-on, but we like the no-nonsense approach and the fact that your data never leaves your device.
Roboform
Another long-standing favorite is Roboform. Like its rivals in this list, the service offers a wide range of features that make life easier for you when interacting with sites online. There’s end-to-end encryption, auto-filling of account details, new password generation, a security suite to monitor and advise you of the current health of your passwords, cloud syncing to keep all your devices up to date, multi-factor authentication, secure sharing, folders, and search features to organize your passwords, plus emergency access which allows family members to access your account if you should fall ill or pass away.
There’s secure storage for your credit cards and IDs, not to mention notes, contacts, and even your browser bookmarks, which is something we haven’t seen on other services.
Roboform is available for macOS, Windows, Linux, iOS, and Android, or you can use the browser extensions provided for Chrome, Safari, Firefox, and Microsoft Edge.
Prices are very affordable, with the free tier actually being quite decent as it provides unlimited password storage, auto-fill, secure sharing, and other basic features, albeit for a single device. To take advantage of all the capabilities Roboform has to offer you’ll want the Premium tier which costs a very reasonable $29.88 (approx £20) per year and works across all your desktop and mobile devices.
LastPass
LastPass is probably one of the best-known password manager, thanks to it being one of the original pioneers in the field, however, in recent years it’s lost its crown after being hit with several hacks, including at least one that stole encrypted customer data. This recent history makes it harder to recommend.
Not that security measures aren’t there, the company explains that it uses “AES 256-bit encryption with PBKDF2 SHA-256 and salted hashes to ensure complete security in the cloud.”
The app does all of its encryption locally, so LastPass never knows your master password, and the Premium tier also supports a form of two-factor authentication for another layer of security. This is called MFA (Multi-Factor Authentication) and not only allows confirmation text messages to be sent, but also works with biometrics (Face ID & Touch ID) and even voice commands (although some of these methods are reserved for the Business plan).
You can either use LastPass locally on your device via dedicated apps (macOS, iOS and iPadOS), or via the web with plugins and extensions available for Safari, Firefox, Chrome, Opera, and Microsoft Edge all of which allow you to automatically access login details for sites and accounts or have LastPass autofill the login fields on your behalf.
Just like with other managers you have access to a vault where all of your passwords are stored, and these can be changed to more complex alternatives at the touch of a button. LastPass will also advise you on how secure your passwords are for your existing accounts. Getting set up is easy too, as you can import existing passwords from web browsers, email, and other password managers.
The app offers a digital wallet to store your card details, plus another area for official ID such as passports and driving licenses. The Note section is a place where you can keep Wi-Fi passwords, insurance details and any other important documents that you need to access. It’s also possible to securely share account details and logins with friends and family, even if they don’t have LastPass.
There is a free tier, although this is limited to one device, so if you want to sync across your Mac and iPhone you’ll need to move up to the Premium tier. At the time of writing, this will cost £31.20/$36 per year. Those wanting more scope can opt for the family plan which includes six user accounts and only costs £40.80/$48 per year on the LastPass website.
One of the advantages of a paid plan is an Emergency backup which means that, should you suffer an accident or even pass away, your family will be given access to your account.
Read our full LastPass review
Source : Macworld
