Why your browser’s password manager isn’t good enough
Stand-alone password managers work better and extend beyond your browser.
Back in the day, conventional wisdom said to never store your passwords in your browsers. That’s not true anymore. Modern browsers are much more secure, tied to accounts protected by two-factor authentication. Most of the major ones can now double as a basic password manager, complete with the ability to create strong, random passwords—microsoft’s Edge browser ( go.pcworld.com/mseg) is the latest to support the feature. Most people will still probably be better off using a third-party password manager ( go.pcworld. com/3ppm), though.
There’s no doubt that using your browser’s password manager can solve some headaches. It makes it easy to use strong, unique passwords for every site and service you use, eliminating risk from reusing passwords. (If a website gets breached, criminals can use your leaked login to sign into other sites if you reuse passwords.) Some will even tell you if your login information has had a security breach and prompt you to switch passwords. And browsers are free!
But browser-based password managers lock you into using that particular browser.
If you use Chrome’s password manager, for example, your login information will be synced across your Google account. When you try to sign into a website in Firefox or Edge, those passwords aren’t readily available—they’re only in Chrome. And if you’re using the ability to automatically generate long, random passwords (you should be!), there’s no way you’ll be able to recall the information without logging into Chrome to find it.
Signing into mobile websites or apps can also be a massive headache, though if you’re an Android user that stores passwords in Chrome, or an IOS user that stores passwords in Safari, you might be able to sign into mobile apps that hook into your Google or Apple account, respectively.
WHY YOU NEED A PASSWORD MANAGER
Conversely, third-party password managers like Lastpass ( go.pcworld.com/lpsv) (our favorite) and Dashlane ( go.pcworld.com/ dsrv) (a close second) were designed from the ground up to be cross-platform and work with any browser. Once you’ve installed their tools, you can log into any service in any software on any device, easy-peasy. Websites? Mobile apps? Desktop software? No problem. That alone makes a stand-alone password manager worthwhile in today’s multi-device world. (They can usually import saved passwords from your browser when you get started!)
Password managers offer other benefits, too. Browsers revolve around your account alone, but password managers include features that help you easily and securely share passwords with other people—helpful if someone needs to use your Wi-fi, or a
coworker needs access to a joint account, or if you want to share your Netflix password with your parents. Sharing login details is a pain if the information is stored deep inside your browser.
Password managers usually support more robust auto-fill options as well. Yes, your browser likely includes those capabilities too, but as with the actual password management, it’s a basic incarnation. Anything your browser can do, a password manager can usually do better.
Password managers may also offer other helpful features. They can issue reminders to change out old passwords, provide a secure vault to store sensitive information, share emergency passwords with chosen contacts, or even offer basic VPN capabilities for accessing open Wi-fi hotspots safely.
Think of it this way: Password managers exist to keep your accounts secure. Their developers are wholly focused on your protection. With browsers, password management is just another supported feature.
If you don’t need to worry about sharing passwords with others, or you use only a single browser on your devices, then a browser-based password manager might work very well for you. Using the random password generation feature in your browser is a big step up over reusing passwords or relying on simple passwords. If you’re a Chrome user with an Android smartphone, or a Safari user with an iphone, those stored passwords could even be carried over to many mobile apps with minimal headaches.
Most people, however, would be better off with a proper password manager for all the reasons outlined above. The top options all offer free accounts with basic capabilities, while splurging on a premium account only costs a few bucks a month. It’s money well spent. Our guide to the best password managers ( go.pcworld.com/gdpm) can point you toward the cream of the crop, and it explains everything you should look for in a decent password management service.