Cloud vault, local file or your own server
A password manager keeps all your logins behind one master password. The free options store that vault in one of four places:
| Kind | Where the vault lives | Examples |
|---|---|---|
| Cloud vault | On the vendor's servers, synced to your devices | Bitwarden, Proton Pass, LastPass, Zoho Vault |
| Built in | In your browser or phone account | Apple Passwords, Google Password Manager |
| Local file | In one encrypted file on your computer | KeePassXC, KeePass |
| Self-hosted | On a server you run yourself | Passbolt Community Edition, Vaultwarden |
A cloud vault is the easiest way to have the same logins on a phone and a laptop. A local file keeps everything off other people's servers, but you copy or sync the file yourself. KeePassXC says the file can sit in any folder, including a cloud storage folder you choose.
Free plan limits compared
The free plans differ in devices, sharing and extras. From the official pricing pages:
| Manager | Free limit |
|---|---|
| Bitwarden | Unlimited devices and passwords, sharing with one other user |
| Proton Pass | Unlimited logins and devices, 2 vaults, 10 hide-my-email aliases |
| LastPass | One device type: computer or mobile, not both |
| Zoho Vault | Unlimited passwords and devices, no sharing |
| Passbolt Community Edition | Unlimited users, but you host and update it yourself |
Bitwarden and Proton Pass list a built-in authenticator for two-factor codes on their paid plans. If you want those codes in a separate free app, see our list of free authenticator apps.
Set it up safely
- Master password: it is the one password you still have to remember, so make it long. Our guide how long should a password be explains why length matters, and the password strength checker shows how a password holds up.
- New passwords: let the manager create a new random password for every site, or make one with the password generator.
- Two-step login: turn on two-factor authentication for the vault itself. Our guide two-factor authentication methods compares codes, keys and text messages.
- Downloads: get the app from the official site or the app store. If the vendor publishes a SHA-256 checksum, compare it with the hash generator.
Free tools for passwords
- Password generator: random passwords and passphrases in your browser.
- Password strength checker: see how long a password would take to guess.
- 2FA code generator: make a one-time code from a setup key.
- Hash generator: SHA hashes of text or files.
We opened each manager's official page on the date in the table and wrote down only what it says. Some well known managers are missing because their pages could not be opened that day or they offer only a time-limited trial.
Frequently asked questions
Is Bitwarden really free?
Yes. Bitwarden's pricing page calls its basic plan always free, with unlimited devices and unlimited passwords and free sharing with one other user. Its Premium plan adds an integrated authenticator, file attachments and emergency access.
Which free password manager works without the cloud?
KeePassXC and KeePass keep your passwords in an encrypted file on your own computer. KeePassXC says no data is stored on remote servers and runs on Windows, macOS and Linux. Both are open source and free.
Can I use the free LastPass plan on my phone and my computer?
No. LastPass says the Free plan is limited to one device type, so you use it either on computers or on mobile devices, not both. Bitwarden, Proton Pass and Zoho Vault list unlimited devices on their free plans.
Do I need a separate app if I use Apple or Google passwords?
Not necessarily. Apple's Passwords app stores passwords, passkeys and verification codes on iPhone, iPad, Mac and Apple Vision Pro, and on Windows through iCloud for Windows. Google Password Manager is built in to Chrome and Android. A separate manager helps when you use devices from both worlds.
Can I host my own password manager?
Yes. Passbolt Community Edition is free forever for unlimited users under the AGPL v3 license, and Vaultwarden is a self-hosted server that works with Bitwarden clients. Vaultwarden says it is not associated with Bitwarden, and you are responsible for the server and its backups.