If I had to pick one piece of personal cybersecurity advice for a UK adult who'd never thought about cybersecurity before, it would be this: get a password manager. Not a VPN. Not antivirus. Not a fancy router. A password manager.
Reusing passwords across accounts is the single biggest individual cybersecurity risk for most UK adults. When one site is compromised — and sites are compromised constantly — the same email-and-password combination gets tested against banking, email, and social media at industrial scale. A password manager solves this by making unique passwords per site genuinely effortless. The behaviour change is the point.
The category has matured. The question for most UK adults isn't whether to use one, but which one.
What you're trying to accomplish
A password manager does three things that, between them, change your security posture more than anything else you could buy:
- Generates unique strong passwords automatically — eliminates password reuse, the single biggest individual risk.
- Auto-fills logins — reduces friction so you'll actually use the unique passwords you've generated.
- Stores other secrets — credit card details, software licences, secure notes, 2FA recovery codes.
The behaviour change matters more than the specific product. Any of the major password managers is substantially better than the typical adult's current practice of reusing 3-5 passwords across hundreds of accounts.
The four worth knowing
1Password. Premium-tier password manager. Excellent app across all platforms, family and team plans, integrates deeply with macOS and iOS. £3/month individual; £4.99/month family (5 users); £6/user/month team. The right answer for most UK adults willing to pay for quality.
Bitwarden. Open-source. Free tier covers most personal use; £8/year premium for advanced features. Self-hostable for privacy enthusiasts who want to run their own server. Free, £8/year premium, £32/year family. Genuinely capable — not a charity-tier product.
Apple Passwords. Apple's bundled password manager. Free with Apple ID. Improvements in 2024-25 made it genuinely capable. Limited to the Apple ecosystem (Mac, iPhone, iPad, plus Chrome extension on Windows). Sufficient for UK adults entirely in Apple-land who don't need shared family vaults.
Proton Pass. Newer entry from Proton, the privacy-focused Swiss company. Bundled with Proton Unlimited (which includes VPN, email, drive). Strong privacy track record. Free tier; £4-£10/month with the Proton bundle. Right answer if you're already paying for Proton VPN or Mail.
How to actually pick
Most UK adults: 1Password Family at £5/month. Covers you and four family members; the UX is genuinely best in class, and the family vault solves the "how do my partner and I share the Netflix password securely" problem cleanly.
Want free or open-source: Bitwarden. Don't apologise for it — it's a properly good product, and the free tier covers everything most adults actually need.
Apple ecosystem only: Apple Passwords. Sufficient if you don't need shared family vaults.
Already in the Proton ecosystem: Proton Pass as part of the Unlimited bundle.
What I'd swerve: storing passwords in browsers (less secure, no cross-browser sync, breaks if you switch); writing passwords on paper (lost-or-stolen risk that's higher than people think); LastPass (multiple high-profile breaches in 2022-23 damaged trust significantly and the company hasn't recovered).
How to actually adopt one
The migration takes 2-4 weeks of gradual work. Don't try to do everything in one weekend — too overwhelming, you'll give up.
- Sign up for 1Password, Bitwarden, or your choice
- Install the browser extension and the mobile app
- Use it for new accounts from day one
- For existing accounts, change to a randomly-generated password the next time you log in
- Critical accounts first — email, banking, work
- Lower-priority accounts as you encounter them naturally
- Enable 2FA on critical accounts alongside the password manager
After about a month you'll have your top 50 most-used accounts on unique strong passwords, which is the bit that matters most.
What this doesn't fix
A password manager is not a complete security solution:
- Account recovery. If you forget your master password, you may lose access to everything. Use family or partner recovery options where available.
- Phishing. Password managers help — they won't auto-fill on fake sites that don't match the real domain — but don't replace skeptical browsing.
- SMS or email account theft. 2FA via authenticator app (not SMS) is more important here.
- Hardware security keys. For very high-value accounts (significant business assets, executive roles), a YubiKey alongside a password manager is the right level.
Pair with proper 2FA
Password manager + two-factor authentication is the right baseline for UK adults in 2026:
- Authenticator apps: Authy, 2FAS, Aegis, Google Authenticator
- Hardware keys: YubiKey for high-value accounts
- SMS 2FA: better than nothing but vulnerable to SIM swap; use authenticator apps where available
Most password managers (1Password, Bitwarden, Proton Pass) can also generate 2FA codes — convenient, but creates a single point of failure if your password vault is compromised. For maximum security, store 2FA codes in a separate authenticator app from your passwords.
This article is general consumer information about UK password security, not specific personal cybersecurity advice. UK adults with high-value targets (executives, public figures) should consult a security specialist.
Affiliate disclosure: Morningfold has affiliate partnerships with 1Password and Proton. Bitwarden has no affiliate program. See editorial standards.