Password Manager: Why You Need One and Why We Recommend 1Password

“I have nothing to hide” and “there is nothing to steal from me”: we hear this a lot. The problem is that attackers do not pick their victims one by one. They automatically try millions of stolen credentials at email providers, Amazon, PayPal, banks and social media. If you use the same or a similar password everywhere, you are just as much at risk as a company. A password manager solves exactly this problem, and it even makes everyday life easier instead of more complicated.

Why does an ordinary user need a password manager?

An average household quickly ends up with 80 to 150 online accounts: email, online banking, streaming, shops, insurance, government agencies, router, WiFi, smart home, apps. Nobody can remember 100 different, secure passwords. So in practice this is what happens:

• The same password everywhere: if a single shop gets hacked, attackers automatically try the email and password combination on all your other services (“credential stuffing”)
• Slightly altered passwords: Summer2024!, Summer2025!, Amazon-Summer2025. Attack programs spot such patterns immediately
• Passwords on slips of paper, in notes or in Excel lists: unencrypted, without a backup, often readable by anyone
• “Forgot password” as a permanent state: resetting every time, and every time with a slightly weaker password

Your email account is especially critical: whoever has access to it can take over almost any other account via “forgot password”. A single reused password can therefore set off a whole chain.

A password manager makes sure that every account gets its own long, random password, and you still only have to remember one.

How does a password manager work?

Put simply, a password manager is an encrypted vault for your credentials.

1. You remember one master password: long, but easy to remember, for example a sentence made of several words
2. The vault is encrypted on your device before anything goes to the cloud. The provider only stores encrypted data and cannot read it itself (“zero-knowledge principle”)
3. New accounts automatically get a random password, such as t7#Qm2-vXe9!pLr4. You never have to see or type it
4. At login, the manager fills in the credentials automatically, in the browser and in apps on your smartphone and computer
5. All devices stay in sync: a new password on your laptop is available on your iPhone seconds later
6. Unlock with Face ID, Touch ID or Windows Hello: you rarely need the master password in everyday use

An often underestimated security benefit: the password manager fills in credentials only on the genuine website. If a phishing email lands you on paypa1-login.com instead of paypal.com, it simply offers nothing. That is a warning you cannot miss.

What makes 1Password special?

We use 1Password ourselves and recommend it to our customers. The main reasons:

Double encryption thanks to the Secret Key

In addition to your master password, 1Password generates a Secret Key during setup: a long, random key that exists only on your devices. You need both to decrypt. Even if 1Password’s servers were hacked and someone could guess your master password, attackers would not get to your data without the Secret Key. This combination does not exist in that form in the built-in solutions from Apple, Microsoft and Google.

Important: During setup, print out the “Emergency Kit” (a PDF with your Secret Key and space for your master password) and keep it somewhere safe. Without the master password and Secret Key, not even 1Password can recover your vault.

Works everywhere

Mac, iPhone, iPad, Windows, Android, Linux, and as an extension in Chrome, Safari, Firefox, Edge and Brave. Especially in mixed households (iPhone and Windows laptop, Android phone and Mac) this is the deciding point: one vault for everything, regardless of manufacturer.

Sharing in family and team

With 1Password Families or Business there are shared vaults: the Netflix account, the WiFi password for the vacation home or the router login sit in a shared vault, while private accounts stay private. When someone leaves the team, you revoke access with one click instead of having to reset all the passwords. Individual items can also be shared via a secure link with people who do not have 1Password at all.

Watchtower: the security check

Watchtower shows you which passwords are weak, reused or have appeared in known data breaches, and for which services you could still enable two-factor authentication. That way you see at a glance where you should improve.

More than just passwords

• One-time codes (2FA/TOTP) right in the item, filled in along with the login
• Passkeys: the successor to passwords, also available across devices
• Credit cards, addresses, IDs, secure notes, documents
• License keys, router logins, SSH keys for the tech-minded
• Travel Mode: hides selected vaults from your device when crossing a border

And what about the built-in options from Apple, Microsoft and Google?

The built-in password managers are far better than none at all and they are free. If you have been reusing passwords so far, you should use the built-in option today rather than 1Password someday. The differences are in the details:

Apple Passwords (macOS, iPhone, iPad)

Since macOS Sequoia and iOS 18 there is the dedicated “Passwords” app, synced through iCloud Keychain. It is well made, end-to-end encrypted, handles one-time codes and passkeys, and is a solid choice for pure Apple users.

Limits: Outside the Apple world it gets bumpy. On Windows there is iCloud for Windows with a browser extension, but on Android there is no app. Sharing is only possible with other Apple users, and security depends entirely on your Apple account and device passcode. Anyone who knows your iPhone’s passcode can, in the worst case, get to your passwords too.

Windows / Microsoft

Windows itself has no full-fledged password manager for websites. “Credential Manager” only stores logins for network drives and Windows services. Microsoft manages web passwords through the Edge browser, synced with your Microsoft account. The former password feature in the Microsoft Authenticator app was discontinued in 2025 and moved to Edge.

Limits: It only works properly as long as you use Edge. In other browsers and in apps on your smartphone, support is limited.

Google Chrome / Google Password Manager

Chrome stores passwords in Google Password Manager, synced with your Google account and deeply integrated into the system on Android. Convenient, free, with a warning for leaked passwords.

Limits: Without the optional on-device encryption (which you can enable in the Password Manager settings), the key is held by Google. Everything hangs on a single Google account, and anyone sitting at your unlocked computer can often view passwords with the device password. In Safari or Firefox, Google Password Manager does not help you.

The comparison at a glance

	1Password	Apple Passwords	Microsoft Edge	Google Chrome
Platforms	all	Apple, limited Windows	mainly Edge	Chrome and Android
Additional Secret Key	yes	no	no	no
Family / team sharing	yes, with permissions	Apple users only	no	limited
One-time codes (2FA)	yes	yes	no	no
Passkeys	yes	yes	yes	yes
Security check	Watchtower	yes	yes	yes
Documents, IDs, notes	yes	no	no	limited
Cost	subscription	free	free	free

Our rule of thumb: If you use only Apple devices and share nothing with others, Apple Passwords is often enough. As soon as different manufacturers, multiple browsers, family or a company come into play, 1Password is clearly the better choice, and the subscription costs less than a streaming service.

Isn’t it dangerous to have all your passwords in one place?

That is a fair question. The honest answer: a well-encrypted vault with a strong master password is orders of magnitude safer than 100 weak or reused passwords. With 1Password, the Secret Key and optionally two-factor authentication additionally protect the vault. An attacker would need your master password, your Secret Key and, in the worst case, your device.

The real risk is a weak master password. So:

• At least four to five random words, for example Cactus-Glasses-Harbor-Drum-Nine
• Do not use it anywhere else
• Do not store it in the browser or in notes, but remember it or keep it safely on paper

How to switch without overwhelming yourself

You do not have to convert all 120 accounts in one weekend. Here is how to do it in small steps:

1. Set up 1Password and print the Emergency Kit
2. Import your existing passwords: from Chrome, Edge, Safari/Apple Passwords or Firefox. It takes a few minutes
3. Turn off password saving in your browser, so two managers do not offer passwords at the same time
4. Switch the five most important accounts first to new random passwords: email, Apple/Google/Microsoft account, online banking, PayPal, Amazon
5. The rest bit by bit: whenever you log in somewhere anyway, have the password changed
6. Check Watchtower regularly and work through the red items

Conclusion

A password manager is no longer a toy for tech fans but the most important security tool for anyone who is online. The built-in options from Apple, Microsoft and Google are a good start. If you use several platforms, share access with family or employees, or simply want the strongest protection, you are best served by 1Password.

Want to switch but not on your own? We set up 1Password for you, your family or your team, transfer your existing passwords and show you in a short walkthrough how everyday life works with it. Just get in touch.