Quick Answer
The best free password manager for most people is Bitwarden Free, because its free plan allows unlimited passwords on unlimited devices and supports passkeys. Proton Pass Free is a close alternative. People who stay inside one ecosystem can use Apple Passwords or Google Password Manager at no cost, while KeePassXC suits users who want an offline file.
Key Takeaways
- Bitwarden’s free plan lists unlimited devices, unlimited passwords, passkey support and sharing with one other user; its built-in TOTP authenticator requires Premium at $19.80 a year.
- Proton Pass Free includes unlimited logins, unlimited devices and 10 hide-my-email aliases, but the 2FA code generator is a paid feature.
- NordPass Free allows one active session on one device at a time, and LastPass Free is limited to one device type, either computer or mobile.
- Dashlane discontinued its Free plan on September 16, 2025, and 1Password offers only a 14-day trial rather than a free tier.
- CISA recommends passwords of at least 16 characters and a different password for every account, which is the job a password manager handles for you.
What is the best free password manager?
The best free password manager for most readers is Bitwarden Free, because it has the fewest restrictions on the features people use every day. The Bitwarden pricing page describes the plan as “always free” and lists unlimited devices, unlimited passwords, passkey management, a password generator, email alias integration and free sharing with one other user. Bitwarden also states that its code is open source and that it uses zero-knowledge encryption, which means the company does not hold the key needed to read your vault.
Bitwarden Free does have one notable limit. The integrated authenticator that generates two-factor (TOTP) codes inside the vault is listed only for Premium and Families plans, and Premium costs $19.80 per year billed annually (as of October 2026). For most users this limit is minor, because a separate authenticator app can generate those codes.
This comparison uses each vendor’s published free-plan limits as of October 2026, not hands-on testing.
How do the free password manager plans compare?
The free password manager plans differ mainly in device limits, sharing, and whether two-factor codes are included. The table below summarizes the limits each vendor publishes.
| Free option | Main free-plan limit | Devices and platforms | Passkeys | Built-in 2FA codes |
|---|---|---|---|---|
| Bitwarden Free | Sharing with 1 other user; TOTP is paid | Unlimited devices; browser, mobile and desktop apps | Yes | No (Premium) |
| Proton Pass Free | 10 hide-my-email aliases; sharing is paid | Unlimited devices | Yes | No (Pass Plus) |
| NordPass Free | 1 active session on 1 device at a time | Installable anywhere, but only 1 logged-in session | Yes | No (Authenticator not in Free) |
| LastPass Free | 1 device type (computer or mobile); share 1 password with 1 person at a time | Desktop or mobile, not both | Not listed for Free | Not listed for Free |
| Apple Passwords | Apple devices plus Windows through iCloud for Windows | iOS 18, iPadOS 18, macOS Sequoia, visionOS 2 | Yes | Yes |
| Google Password Manager | Tied to a Google Account in Chrome and Android | Chrome, Android, passwords.google.com | Yes | Not listed |
| Microsoft Password Manager (Edge) | Requires a personal Microsoft account profile in Edge | Edge on devices where you sign in | Yes | Not listed |
| KeePassXC | No sync or official mobile app; you manage the file | Windows, macOS, Linux | Not listed | Not listed |
The table shows that Bitwarden and Proton Pass are the least restrictive free plans for people who use a phone and a computer together, while NordPass and LastPass free plans fit a single device best.
Which free password manager options are worth considering?
There are 4 dedicated free password managers and 4 built-in or offline options worth considering. The dedicated apps are Bitwarden, Proton Pass, NordPass and LastPass, and the others are Apple Passwords, Google Password Manager, Microsoft Password Manager in Edge, and KeePassXC.
- Bitwarden Free suits most people, because it combines unlimited devices with open-source code and cross-platform apps.
- Proton Pass Free suits people who want email aliases. The Proton Pass pricing page lists unlimited logins, notes and credit cards, unlimited devices, 10 hide-my-email aliases and passkeys on all devices, while vault sharing and the 2FA authenticator belong to Pass Plus.
- NordPass Free suits people who use one device. The NordPass support center states that the free version allows “one active session on one device,” although the app can be installed on any number of devices.
- LastPass Free suits people who only use a computer or only use a phone. The LastPass pricing page states that free users can use LastPass on desktop or mobile devices, not both.
- Apple Passwords, Google Password Manager and Microsoft Password Manager suit people who stay inside one company’s devices and browser.
- KeePassXC suits people who want full control and accept more manual work.
Two well-known names are missing from the free list for a specific reason. Dashlane announced in an August 5, 2025 Dashlane blog post that it was discontinuing the Free plan on September 16, 2025, and its current personal plans are paid. 1Password’s pricing page offers a 14-day free trial and lists the Individual plan at a regular price of $3.99 per month billed yearly (as of October 2026), with no permanent free tier.
Is Bitwarden or Google Password Manager better for free?
Bitwarden is the better free choice for people who use several browsers or operating systems, while Google Password Manager is the simpler free choice for people who already live in Chrome and Android. Google Password Manager saves passwords and passkeys to your Google Account, fills them in Chrome and on Android, and is also available at passwords.google.com, so it requires no extra app for most Chrome users.
Google also offers optional protection that narrows the gap. According to Google’s on-device encryption help page, turning on on-device encryption means only you can see your passwords and passkeys, and the setting cannot be removed once it is set up. That permanence matters because losing the device credentials used to unlock the data can make recovery harder, so read Google’s recovery guidance before enabling it.
The practical limit of Google Password Manager is that it is tied to one Google Account and works best inside Chrome, while Bitwarden offers browser, mobile and desktop apps. The most sensible approach is to choose Google if every device you own runs Chrome, and choose Bitwarden if any device does not.
Are built-in password managers from Apple, Google and Microsoft good enough?
Built-in password managers from Apple, Google and Microsoft are good enough for many people, provided all of their devices belong to the same ecosystem. Apple’s Passwords app support page states that the app works on iOS 18, iPadOS 18, macOS Sequoia and visionOS 2, and that it stores passwords, passkeys, verification codes and Wi-Fi passwords, flags weak or leaked passwords, and supports Shared Groups for families. Windows users can reach the same passwords in Chrome or Edge through iCloud for Windows.
Microsoft’s equivalent is now Microsoft Password Manager in Edge. Microsoft’s support documentation states that the feature is available only with a personal account profile in Edge, that saved passwords can be reused on any device where you sign in to Edge with your Microsoft account, and that passkeys saved there also appear in Windows Settings under Accounts. Work or school profiles may be restricted by an IT administrator.
The limitation of every built-in option is the boundary of the ecosystem. Apple lists setup only for Apple devices and iCloud for Windows, so a household that includes Android phones usually works better with a cross-platform manager.
Is a free password manager safe?
A free password manager is safe to use when it comes from a reputable vendor and is protected by a strong master password and two-step login, and it is considerably safer than reusing passwords. The CISA guidance on strong passwords recommends passwords of at least 16 characters and a different strong password for each account, and it describes a password manager as a program that generates, stores and fills in those passwords. Reused passwords are the reason credential-stuffing attacks succeed, because one leaked login unlocks every account that shares it.
The residual risk is that a password manager concentrates valuable data in one place. LastPass’s December 22, 2022 security notice stated that an attacker copied basic customer account information and a backup of customer vault data. LastPass said usernames, passwords, secure notes and form data in those vaults were fully encrypted and could only be decrypted with a key derived from each user’s master password, while some fields, such as website URLs, were not encrypted.
That incident explains why the master password matters more than the brand. A long, unique master password keeps stolen encrypted vaults difficult to crack, and two-step login stops someone who learns the password from opening the vault on a new device. Check whether your email address appears in known breaches with the steps in how to check if your email was in a data breach, and change any password that shows up there first.
Safety note: If you believe someone with access to your phone or computer is monitoring you, set up a new password manager from a device that person cannot reach, and read the guide on how to detect and remove phone spyware before changing passwords on a device that may be compromised. Contact your bank directly if financial accounts were exposed, and contact local victim-support services if your physical safety is at risk.
How do you switch to a free password manager?
To switch to a free password manager, export your saved passwords from the browser, import them into the new vault, and then delete the export file and the old browser copies. The process follows the same pattern for most of the dedicated apps listed above.
- Create the new account and choose a master password of at least 16 characters, following CISA’s length guidance.
- Turn on two-step login for the new password manager account before importing anything.
- Export saved passwords from your browser, for example from Chrome’s Google Password Manager settings or Apple’s Passwords app.
- Import the file using the new manager’s import tool, and confirm that the item count matches the export.
- Delete the export file immediately, because Bitwarden’s help documentation labels .csv and .json exports as plaintext and warns against storing or emailing them.
- Turn off password saving in your browser so that logins are not stored in two places.
- Replace reused and weak passwords, starting with email, banking and phone carrier accounts.
Stop and contact the vendor’s support team if an import fails partway or the item count does not match, rather than deleting your original passwords.
What about passkeys and offline password managers?
Passkeys are worth adopting where sites offer them, and Bitwarden, Proton Pass, NordPass, Apple, Google and Microsoft all list passkey support in their free offerings. A passkey replaces a typed password with a cryptographic key pair, so there is nothing for a phishing site to steal in the usual way. Android users who already store passkeys in a third-party manager can read about moving passkeys between Android password managers, and Chrome users should be aware that malware can target passkeys in Chrome on an infected computer.
KeePassXC is the main free option for people who do not want a cloud account at all. The KeePassXC project describes the app as free and open source under the GPLv3, available on Windows, macOS and Linux, and it stores data in an offline, encrypted KDBX file that you can keep anywhere. The trade-off is responsibility: KeePassXC has no official mobile app, so you must sync the file yourself and keep your own backups, and a lost file without a backup means lost passwords.
Frequently Asked Questions
What is the best free password manager?
The best free password manager for most people is Bitwarden Free, because it allows unlimited passwords on unlimited devices and supports passkeys. Proton Pass Free is a strong alternative for people who also want email aliases.
Is a free password manager safe to use?
Yes, a free password manager from a reputable vendor is safe to use and safer than reusing passwords. Protect it with a long, unique master password and two-step login, because the master password is what keeps an encrypted vault secure.
Does Dashlane still have a free plan?
No, Dashlane no longer has a free plan, because Dashlane discontinued Dashlane Free on September 16, 2025. Its current personal plans are paid and include a 14-day trial.
Can I use LastPass Free on my phone and computer?
No, LastPass Free cannot be used on both a phone and a computer, because the free plan is limited to one device type. You choose either desktop or mobile access unless you upgrade to a paid plan.
Is Google Password Manager good enough instead of Bitwarden?
Yes, Google Password Manager is good enough for people who use Chrome and Android on every device. Bitwarden is the better choice when you use Safari, Firefox or a mix of operating systems, because it works across all of them.