A password manager is an encrypted vault that stores all your usernames and passwords, secured by one master password. It autofills your credentials on websites and apps so you only ever need to remember one password.
Yes — using a reputable password manager is far safer than reusing passwords or writing them down. All leading password managers use AES-256 encryption and a zero-knowledge architecture, meaning the provider never has access to your unencrypted passwords. Even if the company is hacked, your passwords are useless to attackers without your master password.
Zero-knowledge means the password manager company encrypts your data on your device before it ever reaches their servers. They store only encrypted blobs — they cannot read your passwords even if they wanted to. 1Password, Bitwarden, and most major providers use this model.
Most password managers cannot recover your master password — that is a feature, not a bug. It means no one can be tricked into resetting it for an attacker. You should store your master password somewhere secure (a printed copy in a safe, for example). Some providers offer an emergency kit or account recovery via trusted contacts.
Password managers can be targeted but are designed so a breach does not expose your passwords. The LastPass breach in 2022 exposed encrypted vaults — users with strong master passwords remained protected. This is why your master password quality matters enormously.
Bitwarden is an excellent free option that is fully open-source. If you need family sharing, 1GB of file storage, hardware key 2FA, or emergency access, a paid tier (typically $3-5/month) adds meaningful features. Avoid browser-only password managers (Chrome, Safari) as your passwords are tied to that ecosystem.
Yes. Face ID and Touch ID are authentication methods — they confirm it is you unlocking the password manager, but they do not replace storing unique passwords for every site. You still need strong unique passwords; biometrics just make accessing them more convenient.