October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk3 min

How to Set Up a Password Manager and Replace Breached Passwords

Use a password manager to create unique passwords for every account, protect the vault with a long passphrase and MFA, and promptly replace any password exposed in a breach.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Use a password manager that works on your devices to generate and store a different random password for every account. Protect its vault with a long master passphrase and multifactor authentication (MFA) if available. If a service says your password was exposed, change it there and anywhere you reused or closely copied it.

Choose a password manager that fits how you use your devices

Before moving your logins, check that the manager has apps or browser extensions for your laptop, phone, and tablet. Consider how it stores and syncs the vault, how you would regain access if locked out, and how you would keep a backup.

As an Amazon Associate I earn from qualifying purchases.

  • Cloud vault: CISA describes cloud storage as convenient for access across devices, but the vault data is sent over the internet and stored on a server outside your direct control.
  • Local database: CISA describes local databases as typically more secure, but they require careful backups and a way to keep the database available across your devices. This is general guidance, not a guarantee that every local product is safer than every cloud product.

Compare compatibility, password generation, storage, MFA, recovery, and backup options. NIST advises considering what happens if the master secret is compromised and avoiding managers that allow recovery of the master password. These criteria do not establish a single best provider.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Sources: CISA guidance on strong passwords and NIST Digital Identity Guidelines FAQ.

#1 Best Overall
Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

Set up and protect the vault

  1. Choose a long master passphrase. It protects access to the vault, so keep it from being stolen and understand the manager’s recovery process before relying on it. If the master secret is compromised, NIST says the passwords in the vault need to be recreated.
  2. Turn on MFA for the manager. Use it if the service supports it; CISA recommends selecting a manager that offers MFA.
  3. Import or add your saved credentials. Use the manager’s own instructions for importing, then review entries for duplicate or outdated passwords. Do not leave exported password files sitting unprotected on your device.
  4. Replace reused passwords. Start with email, financial, and social accounts, plus any account sharing a breached or similar password. Generate a distinct random password for each service rather than making predictable variations of one base password.

NIST says password managers offer greater security and convenience for using passwords to access online services. Unique passwords matter because a password exposed at one service may be tried against other services. Sources: NIST Digital Identity Guidelines FAQ and NIST guidance on building better passwords.

What to do when a service reports a breach

  1. Change the password at the affected service promptly if the notice says it was exposed. Go directly to the service’s app or website rather than following an unexpected link in a message.
  2. Change it anywhere else you reused it or made it similar. Prioritize your email account and other accounts that can reset passwords or access important financial or personal information.
  3. Enable MFA where available. An authenticator app or security key is preferable to text or email codes when the service offers those options; the FTC describes codes by text or email as less secure.
  4. Check what information was exposed. Follow steps suited to the data involved. If sensitive personal or financial details were exposed, use the FTC’s IdentityTheft.gov data-breach guidance.

The FTC’s advice is to change the password used with the breached company and on accounts using a similar password. Sources: FTC breach advice and FTC guidance on protecting personal information.

Rank #2
Sale
Password Safe
  • Requires 3 "AAA" batteries (included)
  • Unit auto-locks for 30 minutes after 5 consecutive incorrect PINs

Protect the email account used for recovery

Your email account often receives password-reset links. Give it a unique password stored in the manager and turn on MFA. The FTC warns that someone who controls your email may use reset links to take over other accounts. Where offered, choose an authenticator app or security key instead of text or email codes.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

If the password manager itself is compromised

A breach at one website and exposure of the vault’s master secret are different situations. If you have evidence the master secret was compromised, NIST says the passwords stored in the vault need to be recreated. Change them at each service, use new unique passwords, and secure the manager and its recovery options.

Sources: NIST Digital Identity Guidelines FAQ and FTC guidance on protecting personal information.

Rank #4
Yubico - YubiKey Bio C (FIDO Edition) - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C, Biometric, FIDO Certified - Protect Your Online Accounts
  • FIDO-ONLY FUNCTIONALITY: Supports FIDO2 (passkeys) and FIDO U2F protocols for passwordless and second-factor authentication. Does not support OTP, TOTP, Smart Card (PIV), or other advanced features - upgrade to YubiKey 5 Series for extended functionality
  • SECURE AND CONVENIENT: Passwordless MFA login with the YubiKey Bio authenticator and biometric information using a fingerprint, with a PIN as a fallback. Simply plug in via USB and use your fingerprint to authenticate
  • DEVICE & OS COMPATIBILITY: Compatible with Windows, macOS, ChromeOS, and Linux. Works seamlessly with supported services like Google and Microsoft accounts, and major password managers. See the full compatibility list at "Works With YubiKey"
  • DURABLE & RELIABLE: Resistant to tampering, water, and crushing. No batteries or network connectivity required, offering dependable authentication without any downtime. Securely manufactured in USA & Sweden
  • Yubico Authenticator App - Fingerprint enrollment, passkey management and PIN configuration available via the app app - Upgrade to YubiKey 5 Series to generate one-time-passwords (OTP) via Yubico Authenticator and for advanced compatibility (OATH, PIV)

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.