Free tools Windows power users keep installed
One-click scans. No signup required.
For many Windows 11 users, Microsoft Edge is the simplest password manager to start with. A third-party manager may be a better fit if you need a particular cross-device workflow, sharing features, or passkey support. The right choice depends on the devices and sign-in flows you use—and on what you want protected if your Windows session is compromised.
A password manager stores and fills passwords. A passkey is a different kind of sign-in credential: it may be stored in a password manager, on a Windows device, on a phone or tablet, or on a physical security key. These options overlap, but they are not interchangeable.
As an Amazon Associate I earn from qualifying purchases.
What changed in Microsoft Edge’s password protection?
Microsoft retired Edge’s Custom Primary Password for users who had opted into it on June 4, 2026. Microsoft says Edge now uses device-based authentication—such as Windows Hello, the device password, or operating-system authentication—to protect saved passwords. That is a change in how Edge protects credentials, not proof that one password manager is best for every Windows 11 user. Microsoft Support explains the change and its date.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Microsoft’s Edge security documentation says, “For most threat models, using the Microsoft Edge password manager is the recommended option.” The same guidance says organizations should assess their own risk profile and discusses trade-offs with third-party managers. Treat that recommendation as Microsoft’s guidance, not a universal security verdict. Read Microsoft’s security comparison.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
How to compare a Windows 11 password manager
Before choosing a free or paid option, check the workflow you actually need. A feature listed for one browser, device, or account does not guarantee it will work in every Windows sign-in flow.
- Windows fit: Check for a Windows app, a browser extension for the browser you use, and support for the apps and sites where you sign in.
- Sync and storage: Find out whether credentials sync between devices, where they are stored, and how account recovery works. Sync is convenient, but it also means you are relying on the service’s account and recovery process.
- Security model: Consider what protects the vault, what happens if someone gains access to your unlocked Windows session, and how much you trust the provider and its software supply chain. No storage model eliminates every risk.
- Passkey workflow: Confirm that the manager supports passkeys in the browser, app, and sign-in flow you need. Availability can depend on the feature, software version, account, and organizational policy.
- Cost and sharing: Check current free-tier limits and whether family or team sharing requires a paid plan. Plan features and terms can change, so verify them with the provider before committing.
- Everyday usability: Autofill, importing existing passwords, and unlocking or recovering the vault affect whether you will consistently use unique passwords.
Edge or a third-party manager: which fits?
Edge’s built-in manager
Edge is a convenient starting point if you already use the browser and want saved passwords protected through your Windows device authentication. Microsoft’s security documentation notes that the convenience of a password manager can make it easier to use a different long password on each site. It also warns that an attacker operating within your operating-system session may be able to retrieve saved passwords. Microsoft’s guidance discusses both the convenience and the risk.
Rank #2
- Requires 3 "AAA" batteries (included)
- Unit auto-locks for 30 minutes after 5 consecutive incorrect PINs
A third-party manager
A separate manager may suit you if its Windows app, browser extensions, syncing, sharing, or passkey support better match your routine. That choice adds reliance on an outside provider and may add setup or recovery complexity. Microsoft’s security documentation frames the decision as a threat-model choice: compare the protections and trade-offs rather than assuming that either a built-in or third-party manager is always safer.
What the available comparison establishes
Tom’s Guide’s 2026 comparison includes 1Password, Bitwarden, Keeper, NordPass, and Proton Pass among its password-manager entries. In the sections reviewed, it lists Windows support for 1Password, Bitwarden, and Keeper, and its feature table distinguishes options such as free versions, passkeys, browser plugins, and biometrics. Those are that publisher’s editorial findings, not independent hands-on testing for this article. Check the providers’ current feature descriptions and plan terms before choosing. See the comparison.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How do I sign in using a passkey?
Choose the passkey option offered by the site or app, then follow its prompt to use the credential stored in the location you set up. Depending on the sign-in flow, account, and—at work or school—organizational support and policy, that location may be a password manager, a phone or tablet, a physical security key, or the Windows device using Windows Hello. Microsoft also identifies 1Password as an example of another manager for work or school passkeys. Microsoft explains passkey sign-in options.
A physical security key is optional and is not password-manager software. It is one possible place to save or use a passkey when the service and sign-in flow support it. If the option you expect does not appear, check which credential store is available for that account and whether your organization permits it.
Rank #4
- FIDO-ONLY FUNCTIONALITY: Supports FIDO2 (passkeys) and FIDO U2F protocols for passwordless and second-factor authentication. Does not support OTP, TOTP, Smart Card (PIV), or other advanced features - upgrade to YubiKey 5 Series for extended functionality
- SECURE AND CONVENIENT: Passwordless MFA login with the YubiKey Bio authenticator and biometric information using a fingerprint, with a PIN as a fallback. Simply plug in via USB and use your fingerprint to authenticate
- DEVICE & OS COMPATIBILITY: Compatible with Windows, macOS, ChromeOS, and Linux. Works seamlessly with supported services like Google and Microsoft accounts, and major password managers. See the full compatibility list at "Works With YubiKey"
- DURABLE & RELIABLE: Resistant to tampering, water, and crushing. No batteries or network connectivity required, offering dependable authentication without any downtime. Securely manufactured in USA & Sweden
- Yubico Authenticator App - Fingerprint enrollment, passkey management and PIN configuration available via the app app - Upgrade to YubiKey 5 Series to generate one-time-passwords (OTP) via Yubico Authenticator and for advanced compatibility (OATH, PIV)
What should you choose?
Start with Edge if its device-based protection and browser workflow meet your needs. Consider a third-party manager when you need capabilities or cross-device behavior Edge does not provide for your use case. Whichever you choose, confirm the exact passkey flow and current plan limits, and keep Windows access protected: a compromised user session can put credentials at risk even when a password manager is in use.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
