Password managers compared
A plain comparison of Apple Passwords, Google Password Manager, Bitwarden, 1Password, KeePassXC and Proton Pass, covering cost, platforms, passkeys and open source, plus how to pick one.
Any password manager beats none
The most important decision is to use a password manager at all. Every option on this page generates long random passwords, stores them encrypted and fills them in for you, which ends password reuse. Pick the one you will actually use on every device, then spend your energy moving your important accounts into it. Why this matters is covered in passwords and password managers.
Side-by-side comparison
| Manager | Price tier | Platforms | Passkeys | Open source |
|---|---|---|---|---|
| Apple Passwords | Free | iPhone, iPad, Mac, Vision Pro; Windows via iCloud for Windows | Yes | No |
| Google Password Manager | Free | Android, Chrome on any desktop, Chrome on iPhone | Yes | No |
| Bitwarden | Free tier; low-cost premium and family plans | Windows, Mac, Linux, iOS, Android, all major browsers | Yes | Yes |
| 1Password | Paid only (free trial) | Windows, Mac, Linux, iOS, Android, all major browsers | Yes | No |
| KeePassXC | Free | Windows, Mac, Linux; phones via compatible third-party apps | Yes, via its browser extension | Yes |
| Proton Pass | Free tier; paid plans | Windows, Mac, Linux, iOS, Android, all major browsers | Yes | Yes |
Prices and features change often. Check each provider's official site for current plans before you pay.
The built-in options
Apple Passwords became a standalone app in iOS 18 and macOS Sequoia. It stores passwords, passkeys, Wi-Fi passwords and verification codes, syncs through iCloud Keychain with end-to-end encryption, and works on Windows through the iCloud for Windows app and a browser extension. It is the easiest choice if your household is all Apple.
Google Password Manager is built into Chrome and Android. It syncs through your Google account and can be protected with on-device encryption. It is the easiest choice for Android and Chrome users, but less convenient if you use Safari or Firefox.
The trade-off with both is lock-in: sharing with family members on other platforms, or moving away later, is harder than with a standalone manager.
The cross-platform options
Bitwarden has one of the most generous free tiers, with unlimited passwords on unlimited devices. Its code is open source and it has published third-party security audits. Premium adds extras such as built-in authenticator codes and security reports. Organizations can self-host it.
1Password is a polished paid product with strong family and business features, a "Secret Key" that adds protection to your master password, and a Travel Mode that hides selected vaults. It has no free tier.
Proton Pass comes from the Swiss company behind Proton Mail. Its standout feature is email aliases, which let you give each website a different forwarding address to cut spam and limit breach exposure. The free plan covers the basics; paid plans add more aliases and a built-in authenticator.
The offline option
KeePassXC stores your vault as an encrypted file on your own computer, with no company account and no cloud. You can sync that file yourself through a cloud drive, and open it on phones with compatible apps such as KeePassDX (Android) or Strongbox and KeePassium (iPhone). It suits people who want full control, but you are responsible for backups and syncing.
With any manager, if you forget your master password and have not set up a recovery method, the company usually cannot recover your vault. That is the point of end-to-end encryption. Set up recovery or emergency access on day one.
How to choose
- All Apple devices: Apple Passwords.
- Android plus Chrome everywhere: Google Password Manager.
- Mixed devices on a budget: Bitwarden or Proton Pass.
- Mixed devices, family sharing, willing to pay: 1Password or a family plan from Bitwarden or Proton.
- No cloud, maximum control: KeePassXC.
Whichever you choose, protect the manager with a long passphrase and two-factor authentication, and run its security report to find reused or breached passwords.
