Reusing the same password across multiple sites, or relying on your browser's built-in save-password prompt, is one of the biggest everyday security risks for a home PC. A dedicated password manager generates and stores a unique, strong password for every account, and the best free options do this without any subscription at all.
Key takeaway: Bitwarden's free tier offers unlimited passwords with sync across all your devices, making it the easiest genuinely free upgrade from browser-saved passwords.
Bitwarden: the easiest starting point
Bitwarden is open source, and its free tier includes unlimited password storage, sync across unlimited devices, a browser extension for autofill, and two-factor authentication support for logging into Bitwarden itself. This is more generous than several competing paid managers offer even on their entry-level paid plan, which is why it's widely recommended as the default free choice.
- Create a free Bitwarden account at bitwarden.com and set a strong, memorable master password — this is the one password you must never forget.
- Install the Bitwarden browser extension and the mobile app, signing in with the same account.
- Import existing saved passwords from your browser (Bitwarden has a built-in import tool for Chrome, Edge and Firefox).
- Turn on two-factor authentication for your Bitwarden account itself, ideally with an authenticator app rather than SMS.
- Gradually update your most important accounts (email, banking, shopping) with new, Bitwarden-generated unique passwords.
KeePass: fully offline and self-controlled
KeePass (and its more modern fork, KeePassXC) stores your password database in a single encrypted file on your own device, with no cloud account required at all. This appeals to anyone who wants zero reliance on a third-party server, but you're responsible for syncing that file yourself, typically by placing it in a personal cloud storage folder like Dropbox or OneDrive if you want it on multiple devices.
Tip: Whichever password manager you choose, write your master password down on paper and store it somewhere physically secure, such as a locked drawer — losing it usually means losing access to every stored password permanently.
Why browser-saved passwords fall short
Browser password storage (in Chrome, Edge or Firefox) has improved over the years and is far better than reusing passwords, but it ties your passwords to that specific browser's ecosystem, generally offers weaker organisational tools (folders, sharing, security audits), and in some configurations is more exposed if your Windows user account itself is compromised, compared with a manager using a strong, separate master password and its own encryption.
Before you start: Download Bitwarden or KeePassXC only from their official websites (bitwarden.com, keepassxc.org) or official app stores. Search results for "free password manager" sometimes surface unrelated apps with poor security practices.
Checking for compromised passwords
Both Bitwarden (in its Vault Health report, part of the free tier) and standalone tools like Have I Been Pwned let you check whether any of your existing passwords have appeared in a known data breach, which is worth doing as part of your initial switch-over.
| Manager | Sync | Offline-only option | Password count limit |
|---|---|---|---|
| Bitwarden | Built-in cloud sync, free | No | Unlimited |
| KeePassXC | Manual, via your own cloud folder | Yes | Unlimited |
Frequently asked questions
- What happens if I forget my Bitwarden master password?
- Because Bitwarden uses zero-knowledge encryption, it cannot recover it for you. Setting up account recovery options or storing a written copy securely is essential.
- Is a free password manager less secure than a paid one?
- Not inherently. Bitwarden's free tier uses the same encryption as its paid tiers; paid plans mainly add extras like secure file storage and advanced sharing, not stronger core security.
- Can I use a password manager on my phone as well as my PC?
- Yes, both Bitwarden and KeePassXC (via companion apps) support Android and iOS, keeping passwords in sync across every device you use.