What happens if I forget my master password?

With zero-knowledge managers, nobody can recover it — that's the security tradeoff. Most offer an emergency access or recovery-code feature you should set up in advance.

What Is a Password Manager?

Q: What is a password manager?

An app that stores all your login credentials in an encrypted vault, locked by one strong master password. It can also generate unique random passwords for every site.

Q: Are password managers safe?

Yes — reputable ones use AES-256 encryption and zero-knowledge architecture, meaning even the provider can't read your vault. They're far safer than reusing passwords or storing them in notes.

Q: What is password entropy?

A measure of unpredictability in bits. A random 12-character password using all keyboard characters has about 78 bits of entropy — far beyond what brute force can touch.

In short: one master password unlocks an encrypted vault holding unique random passwords for every account. Generate strong passwords free →

How a password manager works

🔐 Encrypted vault — your passwords are scrambled with AES-256 encryption; only your master password unlocks them
🙈 Zero-knowledge design — reputable providers can't see your vault even if they wanted to (which also means they can't recover a forgotten master password)
🎲 Built-in generator — creates long random passwords you'd never memorize and never need to
⚡ Autofill — logs you in with a click and resists phishing better than you do (it won't fill credentials on a fake domain)
🔄 Sync — the encrypted vault follows you across phone, laptop and browser

Entropy: what makes a password strong

Strength is measured in bits of entropy — unpredictability. Each extra bit doubles the guessing work. A random 12-character password drawn from all 94 keyboard characters carries about 78 bits of entropy: roughly 4.7 × 10²³ possibilities, untouchable by brute force. By contrast, Summer2026! has a pattern attackers try in seconds, regardless of length. Length plus randomness is everything; clever substitutions (@ for a) are nearly worthless.

Why reusing passwords is the real danger

The biggest threat isn't someone guessing your password — it's credential stuffing: attackers take email/password pairs leaked from one breached site and try them everywhere else. One reused password turns a single breach into every account compromised. A manager makes unique passwords effortless, which kills this attack entirely. Pair it with two-factor authentication on important accounts and you're ahead of ~99% of users.

❓ Password Manager FAQs