Password manager

Bitwarden is an example of a password manager. Pictured above is its vault interface showing a saved login entry, which keeps a one's usernames and passwords.

A password manager is software used to store usernames and passwords in a collection commonly called a password vault. The vault is intended to be encrypted, with its encryption key commonly derived from a primary password chosen by the user, commonly called a master password. Most modern password managers can generate passwords, save credentials entered on websites, and fill them when the user returns. Some also synchronize records across devices, share credentials with other users, and store payment-card details, secure notes, and documents.

Password managers may run as standalone applications, browser extensions, components built into web browsers, or services integrated with an operating system. Their vaults may remain on a device or be synchronized through a provider's servers or a separate file-storage service. Generated passwords make it practical to use a different password for each account, which reduces the need to memorize or reuse credentials.

Because a vault may contain credentials for many accounts, the password manager and its master password are valuable targets for attack. Security depends on how the vault is encrypted, whether unauthorized changes can be detected, and how autofill, synchronization, sharing, and account recovery are implemented. Some users avoid or stop using password managers due to concerns on trust, loss of control, setup, or compatibility with websites. In a 2023 survey, 32% of adults in the United States reported using one, while an Australian survey gave an adjusted estimate of 26.8% for use in 2024.

Counterpane Systems released Password Safe for Windows 95 in 1997. Password managers later became available as browser components, mobile applications, cloud-based services, and features built into an operating system. Some password managers can also create and store passkeys, public-key credentials that may replace passwords or be used as an additional authentication factor.