Home › Best password managers 2026

Privacy software · Updated October 2026

Best password managers 2026: four audited picks

Affiliate disclosure: Affiliated, never sponsored. We earn commissions through links on this page, but commissions don't move rankings — picks with no affiliate program are still mentioned where they're the honest choice. See “How we test” for the protocol behind every score.
Lab status: published pricing · audit & compliance records · free-tier limits — in progress: hands-on autofill & usability testing.

The short answer

Bitwarden is the default we'd give a friend: free forever with unlimited passwords on unlimited devices, fully open-source, and audited more often than anyone else here. If you'd rather pay for polish, 1Password is the best-in-class premium pick. NordPass is the best value paid plan at about $1.99/mo, and Dashlane makes sense only if you'd buy a VPN anyway — it bundles one with Premium at $4.99/mo.

These are launch assessments from published audits, pricing, and feature documentation — not lab scores. Hands-on testing is pending; prices below are from published pages checked October 2026 and can change at renewal. Verify at checkout.

The four, side by side

Bitwarden1PasswordNordPassDashlane
Free tier✓ Unlimited passwords, unlimited devices, forever✗ 14-day trial onlyUnlimited passwords, one active device✗ Free plan ended Sep 2025; 14-day trial
Individual priceFree (Premium $19.80/yr)From $3.99/mo billed annuallyFrom $1.99/mo on the 1-year planFrom $4.99/mo billed annually
Family plan$3.99/mo — 6 accounts$5.99/mo — 5 users$3.69/mo — 6 vaults$7.49/mo — 10 users
Audits & certificationsCure53 (2018, 2022); Fracture Labs & Unit 42 (2025); SOC 2 Type II + SOC 3; ISO 27001SOC 2 Type II; ISO 27001; Cure53 audits reported 2023–2025Cure53 (2020, 2021); SOC 2 Type 2SOC 2 Type II (annual); ISO 27001
EncryptionAES-256, zero-knowledge; open-source codeAES-256 + Secret Key, zero-knowledgeXChaCha20, zero-knowledgeAES-256 + Argon2, zero-knowledge
Passkeys✓ Stores & syncs passkeys✓ Stores & syncs passkeys✓ Stores & syncs passkeys✓ Stores & syncs passkeys
Standout featureSelf-hostable; fully open sourceTravel Mode; WatchtowerBreach scanner + email maskingBundled VPN (Hotspot Shield)

Prices from official pricing pages checked October 2026; promotional and renewal rates differ — verify at checkout.

Our picks, ranked

1. Bitwarden — the free one we'd actually use

Bitwarden is the only manager here with a genuinely usable free tier: unlimited passwords, unlimited devices, passkeys, and sync, forever. It's also the only fully open-source option — the code is on GitHub for anyone to inspect, and it has the longest audit trail in the group (Cure53 in 2018 and 2022, Fracture Labs and Unit 42 in 2025, plus SOC 2 Type II, SOC 3, and ISO 27001). The $19.80/year Premium tier adds an integrated authenticator, 1GB of encrypted file storage, and vault health reports — nice, but most people never need it. Note that Premium's price rose from $10/year in early 2026; some listings still show the old figure.

Try Bitwarden free

2. 1Password — the premium pick

The most polished app here, with the differentiators that justify the price for people who want the best experience: a 128-bit Secret Key that protects your vault even if your master password leaks, Travel Mode that hides sensitive vaults at border crossings, and Watchtower breach monitoring. It carries SOC 2 Type II and ISO 27001 certifications, with Cure53 audits reported in 2023–2025, and has no vault breach on record. The honest downside is money: $3.99/mo billed annually after the March 2026 increase ($2.99/mo is commonly a first-year promo), and there is no free tier at all — just a 14-day trial.

Check 1Password's price

3. NordPass — best value paid plan

From the makers of NordVPN: Premium at $1.99/mo on the 1-year plan (two-year deals run lower) buys unlimited devices, a data-breach scanner, email masking with up to 200 aliases, a built-in 2FA authenticator, 3GB of encrypted file storage, and emergency access. Security pedigree is solid — Cure53 audits in 2020 and 2021 plus a completed SOC 2 Type 2 — and there's never been a public breach. The free tier is unlimited passwords but limited to one active device at a time, which makes it a trial in practice; you need passwords on your phone and your laptop. For paid users, it's the best price-to-polish ratio in the category.

Check NordPass's price

4. Dashlane — pick it for the bundle, not the vault

Dashlane Premium ($4.99/mo billed annually) is the priciest individual plan here, but it bundles a Hotspot Shield VPN, dark web monitoring, and AI-powered phishing alerts — if you'd buy a VPN separately anyway, the math works. Security is enterprise-grade: annual SOC 2 Type II audits, ISO 27001 certification, AES-256 with Argon2 key derivation, zero-knowledge. The Friends & Family plan ($7.49/mo) covers 10 users, though the VPN only covers the account holder. Downsides: Dashlane retired its free plan in September 2025 (14-day trial now), and renewal prices jump above the first-year promo, so set a calendar reminder.

Check Dashlane's price

The ones we left out — and why

LastPass: deliberately excluded

LastPass was the default recommendation for years — until its 2022 breach, in which attackers stole encrypted copies of customer vaults. The company has since rebuilt its security infrastructure, but the stolen vault data still exists, and anyone with a weak 2022-era master password remains exposed. With Bitwarden and NordPass offering comparable value and clean security records, there's no reason for a new user to start with LastPass in 2026. If you were a LastPass user back then: change every stored password and move.

Proton Pass: the honourable mention

If you're already in the Proton ecosystem (Mail, VPN, Drive), Proton Pass deserves a look: open-source apps, a genuinely usable free tier, and unlimited email aliases for hiding your real address at signup. For everyone else, our four picks cover the same ground with longer track records. Prices move often — verify at checkout.

Keeper: the business-only answer

Keeper targets regulated industries — healthcare, finance, government — with the heaviest compliance portfolio in the category (FedRAMP, HIPAA, SOC 2, ISO 27001). For personal use it's overkill at its price; for an IT admin in a regulated sector, it's the shortlist. This page is for personal picks, so it stays out of our rankings.

Password managers vs passkeys: what to actually do in 2026

Passkeys don't replace your password manager — they live inside it. All four picks above store and sync passkeys alongside passwords, which is exactly the setup you want: your phone, laptop, and browser all see the same credentials. The practical move is boring: put passkeys in the manager you already use, keep strong random passwords for everything that doesn't support passkeys yet, and don't scatter credentials across a browser, an authenticator app, and a notes file.

Use a password manager when…

  • You reuse passwords anywhere — this fixes that in an afternoon
  • You share accounts with family or a partner
  • You want breach alerts and a security audit of your logins

Skip these picks when…

  • You only log in on one shared device — the browser may be enough
  • You need zero-cloud storage — consider KeePassXC instead
  • You're choosing mainly on price — Bitwarden free beats every paid tier for basics

Questions, answered

Is it safe to put every password in one vault?

Yes, with any of the four picks here. All use zero-knowledge encryption: your vault is encrypted on your device before it syncs, so the company cannot read your data even if their servers are seized or breached. The real risks are a weak master password and no two-factor on the vault — set both up on day one.

Is Bitwarden's free tier really enough for most people?

For most individuals, yes. It's unlimited passwords on unlimited devices with autofill and passkeys — the limits are the premium extras (integrated authenticator, 1GB file storage, vault health reports). No other free tier here comes close: NordPass caps you at one active device, and 1Password and Dashlane have no free tier at all.

Why is 1Password so much more expensive?

You're paying for polish and the Secret Key — a 128-bit device key issued at signup that protects you even if someone learns your master password. Since its March 2026 price increase (Individual went from $2.99 to $3.99/mo on annual billing), it's the priciest option here by a clear margin. Whether the UX premium is worth 2× the cost of NordPass is a personal call, not a security one.

What's the catch with Dashlane's bundled VPN?

No catch on the VPN itself — Premium includes a Hotspot Shield subscription, which costs roughly what Dashlane charges on its own elsewhere. The real catch is the renewal price: the first-year promotional rate jumps noticeably at renewal, so calendar a reminder to re-check before it auto-renews.

Do I need a password manager if my browser saves passwords?

Browser-only saving is convenient but fragile: it usually lacks strong zero-knowledge guarantees, cross-browser sync, breach monitoring, and secure sharing. For your five most important accounts — email, bank, and anything holding money — a dedicated manager is meaningfully safer.

Can I switch from another manager later?

Easily. Every manager here supports CSV import from competitors and browsers; the migration takes about five minutes. The one thing that doesn't transfer automatically is encrypted file attachments — those need moving by hand.

How often should I change my master password?

Only when you suspect it's been compromised. Frequent rotation produces weaker passwords, not stronger ones. Pick one strong, unique master password — 16+ characters, used nowhere else — and leave it. Your real defense layer is two-factor authentication on the vault itself.

Is monthly billing more expensive than annual?

Almost always — monthly billing typically runs 20–40% higher than the advertised annual rate across this category. The per-month prices in our table assume annual billing; if you pay month to month, expect a premium.

Which password manager is best for a business or team?

Different shortlist: 1Password Business (easiest rollout, SSO and admin controls), Bitwarden Teams (best value, with a self-hosting option), and Keeper (regulated industries needing FedRAMP/HIPAA compliance). This page covers personal picks — team pricing and admin features are a separate comparison.

Final verdict

Start with Bitwarden free — unlimited everything costs nothing, and upgrading is optional. If you'd pay for the best experience, 1Password earns its price with the Secret Key and the best UX in the category. NordPass Premium is the smart middle ground at $1.99/mo. Dashlane only wins if the bundled VPN saves you a separate subscription.

Also from the test team: the best VPNs of 2026 — the same evidence-first approach, applied to VPNs.