The downside of KeePassXC is that it doesn’t have official mobile clients. However, third-party apps are available for iOS and Android. KeePassXC is a fork of KeePass that offers better cross-platform support, but there are a handful of other forks available, as well.
Download the desktop app for Windows, macOS, or Linux and create your vault. There are also extensions for Firefox, Edge, and Chrome. The project does not offer apps for phones. Instead, it recommends KeePass2Android or Strongbox for iPhone.
Other Password Managers We’ve Tested
Password managers are not a one-size-fits-all solution. Our top picks cover most use cases and are the best choices for most people, but your needs may be different. Fortunately, there are plenty of good password managers out there. Here are some more we’ve tested.
Google Password Manager (Free): Google has offered a password manager within Chrome for years, but it recently broadened with a dedicated Android app. Although storing passwords in your browser has a few security concerns, Google offers top-notch encryption, the option to turn on on-device encryption, and integration with biometric authentication on Android and Windows. It can even store passkeys. For most people, I recommend a third-party password manager, but if you aren’t using a password manager at all, Google Password Manager is a good option.
RoboForm ($30 Per Year, $48 Per Year for a Five-User Family Plan): RoboForm has most of the same features as the rest on this list, but it lacks some of the things that differentiate our top picks, like Bitwarden’s open source aspect and 1Password’s travel features. I’ve been testing the free plan for a while and haven’t run into any problems. There are apps for every common platform, and it’s easy to use. RoboForm recently completed an independent security audit and came out looking good.
Pass (Free): Pass is a command-line wrapper around GPG (GNU Privacy Guard), which means it is only for the nerdiest users. It supports managing encrypted .gpg files in Git, and third-party mobile apps are available. It’s not for everyone. For years, this was my password manager of choice, but eventually, Bitwarden’s ease of use won me over.
Password Managers to Avoid
Most password managers are decent. Some are more secure than others, but the top password managers largely compete on features and pricing. Security is a prerequisite. However, there are a couple of password managers you should avoid for various reasons.
ExpressKeys by ExpressVPN: ExpressKeys is from ExpressVPN (formerly Keys by ExpressVPN that I tested, but it’s the same product), which ranks among the best VPN services on the market. But ExpressKeys doesn’t live up to the same standard. It’s secure, but I struggled to get it to work with any consistency. The browser extension requires the desktop ExpressVPN app to work, and closing either will force you to sign back in all over again. Worse, ExpressKeys wouldn’t recognize that I was signed into my ExpressVPN account about half the time. It needs some serious fixes before I can recommend it. —Jacob Roach