I prefer Lastpass, but they're both good and both free. They manage your passwords so you can have completely unique passwords for everything and never forget anything. Just a recommendation, but look into Lastpass or Keepass. I guess I'm guilty of the 'It'll never happen to me' mentality, seeing some people here with accounts that look like they may have been compromised, kinda hit home. >Reading through this thread has also inspired me to create a brand new, totally unique password. Otherwise, you'll quickly fall back to bad password practices :) Ideally, you will be using your password manager all the time and across multiple devices, so it has to work really well for you.

So even if there's a breach, if you use a strong master password, you're safe.

From the security point of view, you should prefer products that guarantee zero knowledge, which means that it encrypts your password vault (saved credentials) on your computer or phone, before it uploads to the cloud. I work for LastPass, so I'm obviously biased when it comes to selecting a product (but it's free so no risk to try). Also, turn on 2FA on all your important accounts, and wherever it's possible, prefer app based 2FA over text-based (hackers regularly trick mobile providers into reassigning your account to a different SIM)

The advantage of password managers is that you won't need to remember. The passwords should be as long and complex (e.g., including symbols) as the given site allows. To stay secure, you should use a password manager, and generate a different random password for each site you use.

Reddit lastpass