How to Set Up a Password Manager Across Your Devices

A password saved on your laptop is little help when you need to sign in on your phone. A password manager brings those logins together, helps you create stronger passwords, and fills them in when needed. To set up a password manager successfully, start with recovery and device access, then gradually replace the passwords you have been reusing.

Choose a manager that fits your devices

Write down the devices and browsers you use regularly. Include your tablet or second computer if you sometimes sign in there.

A built-in password manager can be convenient if it supports your whole setup. A separate password manager may suit you better if you mix operating systems or switch between several browsers.

The best password manager for beginners is one that makes everyday sign-ins straightforward. Before choosing, check:

• Compatibility: Does it support every device and browser on your list?
• Syncing: Does your chosen plan include all the devices you need?
• Security: Does it explain how it encrypts your stored information and protects account access?
• Recovery: What happens if you forget your main password or lose your phone?
• Portability: Can you import existing logins and export them if you move later?

Install apps and browser extensions through the provider’s official website or your device’s official app store, checking the publisher’s name.

Secure the account before adding passwords

Your manager stores logins in a protected collection, often called a vault. Secure access to it before importing your accounts.

If the manager requires a master password, use a long, unique passphrase made from randomly chosen words. Avoid quotations, personal details, or a variation of another password.

For a built-in manager, pay attention to the Apple, Google, or other platform account responsible for syncing your saved information.

Enable multifactor authentication

Multifactor authentication, or MFA, adds another check when signing in—for example, a code from an authenticator app or a physical security key.

Enable it on your password manager account, or the platform account that provides syncing. Where supported, a security key offers strong protection against fake sign-in pages. An authenticator app is another useful option.

Keep the manager’s MFA method accessible independently of its locked vault. Storing its only sign-in code inside that same vault could leave you unable to get in.

Prepare account recovery

Read the recovery instructions now. Some providers cannot restore your encrypted vault if you forget the master password.

Save any recovery key, emergency kit, and MFA backup codes somewhere secure outside the vault, such as a locked physical storage location. A recovery key and an MFA backup code may serve different purposes; check what each one actually restores.

If you keep a paper copy of your master password, protect it like a house key. Avoid leaving recovery information in an ordinary note or screenshot on your phone.

Biometric unlocking is convenient, but you may still need your master password after restarting a device or signing in somewhere new.

Import your existing logins carefully

Starting on a personal computer usually makes importing easier. Open your new manager’s import tool and follow its instructions for your current browser or password app.

A typical transfer involves:

1. Exporting saved logins from the old tool.
2. Selecting that tool or file format in the new manager.
3. Importing the file.
4. Checking several entries for the correct website, username, and password.
5. Testing a few sign-ins before removing the originals.

Treat an exported CSV file as a readable list of your passwords. Avoid emailing it or saving it in a folder that automatically uploads to cloud storage. After verifying the import, delete the export and remove it from the trash or recycle bin.

Check for duplicates before importing again; some managers create another copy of every entry.

If you have no saved passwords to import, add accounts as you use them. You can begin with your main email account and other essential services.

Connect your other devices and test syncing

Install or enable the same manager on your phone, computer, and tablet. Sign in to the same account on each device and enable password syncing where required.

To confirm that you can sync passwords across devices, create a harmless test entry called “Sync test” on your computer. Check that it appears on your phone, then delete it.

If it does not appear, check your internet connection, account details, and sync settings. Some managers also provide a manual refresh option.

Complete this test before relying on newly generated passwords away from your main computer.

Enable autofill on your phone and computer

Autofill lets you select a saved login instead of copying and pasting passwords.

On a computer

For a separate password manager, install its official extension in each browser you use. A desktop app alone may not provide browser autofill.

Unlock the extension, visit a familiar website, and select the matching login. After confirming everything works, turn off competing password-saving prompts if you are moving away from the browser’s built-in manager.

On a phone or tablet

On an iPhone or iPad, search Settings for AutoFill & Passwords, enable password autofill, and select your manager.

On Android, search Settings for autofill, passwords, or preferred service, then choose your manager. Labels vary by manufacturer. Chrome may also need its own setting changed to use another autofill service.

Test both a website and an app.

If a login does not appear, check that the vault entry contains the correct website address. Unexpected autofill failures are also a reason to inspect the page carefully before entering anything manually.

Replace reused passwords in a manageable order

Importing passwords organises them; it does not make reused passwords unique.

Start with your main email account because it often receives password-reset messages. Then tackle financial accounts, cloud storage, shopping accounts with saved payment details, and social media.

For each account:

1. Open the service’s account security settings.
2. Choose its password-change option.
3. Generate a unique password using your manager.
4. Submit the change and save the updated login.
5. Test the new password before closing your existing signed-in session.

Editing a password inside the vault does not change it on the website. Complete the service’s password-change process too.

Use any built-in password review to find reused or exposed passwords. Handle known compromised passwords promptly; work through the remaining accounts a few at a time. Enable MFA on important accounts as you go.

Add passkeys where available

A passkey lets you sign in without typing an account password. You usually approve its use with your device’s fingerprint reader, face recognition, or screen-lock code.

The NCSC’s guidance on managing passwords recommends choosing passkeys where offered, and using strong, unique passwords with two-step verification where they are unavailable.

To add one, open a service’s security settings and look for Create a passkey. Check where it will be saved: your chosen password manager, a device’s built-in manager, or a security key.

Some passkeys sync across devices; others stay on particular hardware. Support also varies between managers, so do not assume a password import transfers passkeys.

Test a new passkey on another device before removing an existing sign-in method. Keep account recovery details current.

When replacing a phone or computer, connect the new device and verify access to your vault, MFA methods, and essential accounts before erasing the old one.