One passphrase to remember, a unique password for everything else — chosen properly, set up safely, migrated in the right order.
There is no honest universal '#1 password manager' — the right one depends on your devices, budget and family. Answer four questions for a criteria-based recommendation.
Day 1 — set up safely: install the manager from its official site/app store only · create the master passphrase · turn on 2FA for the manager itself · save the recovery/emergency kit on paper somewhere safe · add your email account first and change its password.
Then migrate in this order (highest damage if hijacked, first):
| Priority | Accounts | Why first |
|---|---|---|
| 1 | Resets every other account. | |
| 2 | Banking, payment apps, crypto | Direct money access. |
| 3 | Social & messaging | Used to scam your contacts and as login elsewhere. |
| 4 | Shopping & subscriptions | Stored cards and addresses. |
| 5 | Everything else | Work through your tracker below, a few a day. |
At each account: generate a fresh random password in the manager, change it, THEN enable 2FA before moving on. When the list is done, delete old password notes/files — and never type a real password into any 'checker' website, including ours: use the tracker's service names only.
The accounts you are moving into your password manager. ⚠️ Service names ONLY — never type a password, PIN or code into this (or any) tracker. Records are saved under your local account (or guest space) on this device — create, view, edit and delete them any time.