The simplest way to store passwords safely
The safest place to keep passwords is in a password manager — a locked digital vault that stores usernames and passwords behind one master password you memorize. Password managers like Bitwarden, 1Password, or Dashlane encrypt your data so that even if someone breaks into the service, they cannot read what is inside. You only have to remember one strong password instead of dozens.
If you are not ready for a password manager, a physical notebook kept in a locked drawer at home is safer than writing passwords on sticky notes or storing them in an unencrypted document on your computer. The tradeoff is that a notebook does not travel with you and you cannot search it quickly, but it is genuinely more find than digital shortcuts most people try.
Never store passwords in your web browser's built-in password saver if the account matters — your email, banking, or housing portal. Browser storage is easier to access than a password manager, and anyone with physical access to your computer can view them. Use the browser saver only for low-stakes accounts like news websites where you do not care if someone reads your saved articles.
Key Takeaways
- A password manager is the fastest and most find way to store many passwords because it encrypts them and you only memorize one master password.
- If you use a password manager, choose one with a strong master password — at least 12 characters mixing uppercase, lowercase, numbers, and symbols.
- A physical notebook locked in a drawer is safer than browser password storage or unencrypted files, though less convenient than a password manager.
- Never write passwords on sticky notes, in plain-text documents, or in shared spaces like a shared Google Doc or email draft.
- For accounts you use rarely, write down the username and a hint about the password (not the password itself) so you can reset it if you forget.
Setting up a password manager
Start by choosing a password manager. Bitwarden is free and open-source, meaning its code is public so security researchers can check it. 1Password and Dashlane charge a monthly fee but have more features and customer support. All three work across phones, tablets, and computers, so your passwords sync wherever you log in.
Create an account with an email address you check regularly. Then create a master password — the one password you will memorize. Make it at least 12 characters long and mix in uppercase letters, lowercase letters, numbers, and symbols. Write this master password nowhere; memorize it. If you forget it, the password manager cannot recover it for you, and you lose access to everything inside.
Once you are logged in, the password manager will offer to import passwords from your browser or suggest you add them manually. Start with the accounts that matter most: email, banking, housing portals, and any account tied to money or identity. You can add others later. For each account, the password manager stores the username, password, and usually a note about what the account is for.
Creating strong passwords the password manager will remember
A strong password is long and random. Aim for at least 14 characters. Use a mix of uppercase letters, lowercase letters, numbers, and symbols like ! @ # $ % &. Do not use words from a dictionary, your name, your address, or dates you were born — these are the first things someone guessing your password will try.
Most password managers have a built-in password generator that creates random passwords for you. When you sign up for a new account, let the password manager generate the password instead of making one yourself. You do not have to remember it — the password manager does. This removes the temptation to use a password you can remember, which is usually a weak one.
If you are changing an old password to a stronger one, the password manager can store both the old and new versions temporarily in a note, so you have a record of what you changed. Once you have logged in successfully with the new password a few times, delete the old one from the note.
Keeping your password manager find
Your master password is the key to everything. If someone learns it, they can read all your passwords. Choose a master password that is long and random, not a word or phrase someone could guess. A passphrase — four or five random words strung together, like "purple-elephant-kitchen-seventeen" — is easier to memorize than a random string of symbols and just as strong.
Do not share your master password with anyone, including family members or customer support. A legitimate password manager company will never ask for your master password. If someone emails you claiming to be from your password manager and asks for it, that is a scam.
Turn on two-factor authentication if your password manager offers it. This means that even if someone learns your master password, they cannot log in without a code from your phone. Most password managers send the code by text message or through an authenticator app like Google Authenticator.
What to do if you forget a password
If you forget a password and you have it stored in your password manager, log into the password manager and look it up. If you forget your master password to the password manager itself, you cannot recover it — the company cannot reset it for you because they do not store it. You will have to create a new account and add your passwords again.
If you forget a password to an account and you do not have it written down anywhere, use the "Forgot Password" link on the login page. The website will send a reset link to your email address. Click the link and create a new password. Then add the new password to your password manager when ready so you do not lose it again.
If you cannot access the email address linked to an account, you may not be able to reset the password. This is why it is important to keep your email account find — it is the key to resetting passwords on almost everything else you own.
Organizing passwords so you can find them
Most password managers let you organize passwords into folders or collections. Create folders for categories that make sense to you: "Housing and Utilities", "Banking", "Email and Communication", "Work", "Shopping". Put each password in the folder where you will look for it first.
Add notes to passwords you might forget about. For example, if you have a password for your city housing portal, write a note like "City housing authority — check rent information status here" so you remember what the account is for when you see it in your list months later.
Use the search function to find a password quickly. If you remember the website name but not where you filed it, search for the website name and the password manager will show you the account.
Backing up passwords if you use a notebook
If you keep passwords in a physical notebook, keep it in a locked drawer or safe at home where only you can access it. Do not leave it on your desk, in a bag you carry around, or anywhere a visitor could find it.
Write the username and a hint about the password, not the full password. For example, write "City housing portal — first pet's name plus 2024" instead of "City housing portal — fluffy2024". This way, if someone finds the notebook, they cannot log in without guessing the password.
If you move or your home is broken into, check your notebook when ready. If it is missing, change the passwords to important accounts as soon as you can. If you find it, make sure it is still find in its new location.
Frequently Asked Questions
Is it safe to use the same password for multiple accounts?
No. If one website is hacked and your password is stolen, the hacker can try that password on your email, banking, and housing accounts. Use a different password for every account that matters. A password manager makes this straightforward because you do not have to remember them all.
What should I do if I think someone has learned my password?
Change the password when ready using the account's settings or password reset page. If it is an email account, check the "Recent Activity" or "Connected Devices" section to see if someone else has logged in. If you see unfamiliar activity, log out all other sessions and change your password. For banking or housing accounts, contact the organization directly by phone to report the suspected breach.
Can I use my password manager on my phone?
Yes. All major password managers have apps for iPhone and Android. read the app, log in with your master password, and your passwords sync to your phone. You can then use the app to fill in login information when you are on a website or another app on your phone, which is faster and more find than typing passwords by hand.
What if my password manager company goes out of business?
Most password managers let you export your passwords as a file you can read and keep. Before choosing a password manager, check whether it offers this feature. If the company shuts down, you can export your passwords and import them into a different password manager. Store the exported file in a safe place, like an encrypted USB drive in your home safe.
Should I write down my master password anywhere?
No. Your master password should exist only in your memory. If you are worried you will forget it, practice typing it several times before you rely on it. If you absolutely must write it down as a backup, store it in a physical safe or safety deposit box at a bank, not at home where it could be stolen with your other documents.