Skip to content
Know.itKnow.it
Create an animated lesson
On request

This article is free to read. Creating a lesson uses your daily or stored credits; review the language and settings before starting.

How does a password manager work?

TechnologyLesson on requestFree to read

Quick answer

A password manager keeps all your passwords in an encrypted vault protected by one master password. It encrypts each password before storing it and decrypts it only when you need to log in. This means you only have to remember one strong password, and the manager handles the rest securely.

A password manager stores all your passwords in an encrypted vault that is unlocked by one master password. It uses that single password to encrypt and decrypt the vault, so you only need to remember one secret instead of dozens.

Step by step

  1. You create a strong master password that will unlock your vault.
  2. The password manager uses that master password to generate an encryption key.
  3. When you save a password, it is encrypted with that key and stored in the vault.
  4. To use a password, you unlock the vault, and the manager decrypts the password on your device.
  5. The decrypted password is then filled into the website or app automatically.
  6. The encrypted vault can be synced to other devices without exposing your passwords.

Key things to understand

  1. You create one strong master password that only you know.
  2. The manager uses that master password to encrypt your entire vault of passwords.
  3. When you save a new password, it is encrypted before being stored.
  4. When you need a password, the manager decrypts it on your device.
  5. The encrypted vault can be synced across devices without exposing your passwords.

Labelled diagram

  1. Master password

    You create one strong password that only you know.

  2. Encryption key

    The manager derives a key from your master password.

  3. Encrypted vault

    All passwords are encrypted and stored in the vault.

  4. Decryption

    When unlocked, passwords are decrypted on your device.

  5. Autofill

    The decrypted password is filled into the login form.

How a password manager protects your passwords

Real-world examples

  • A person uses a password manager to store unique passwords for their email, bank, and social media accounts.
  • A company requires employees to use a password manager to share team credentials securely.
  • A traveler uses a password manager on their phone to log into accounts without typing long passwords.
  • A family shares streaming service passwords through a password manager's secure sharing feature.

Common mistake

✗ Myth: A password manager is less secure because it stores all your passwords in one place.

✓ Fact: With a well-designed manager, the vault is encrypted on your device, so even if the company's servers are breached, attackers cannot read your passwords without your master password. In practice, it is far safer than reusing passwords.

People also ask

What is a password manager and how does it work?
A password manager is a software application that stores and organizes your passwords in an encrypted vault. It uses one master password to encrypt and decrypt the vault, so you only need to remember that one password. When you log into a website, the manager decrypts the stored password and fills it in for you.
Are password managers safe?
Yes, password managers are generally safe because they use strong encryption to protect your passwords. The main risk is if your master password is weak or if your device is infected with malware. Using a reputable password manager with a strong master password and two-factor authentication greatly reduces these risks.
How do password managers make money?
Most password managers offer a free tier with basic features and charge a subscription fee for premium features like syncing across unlimited devices, secure sharing, and priority support. Some also offer business plans for teams. The free versions are often supported by the paid subscriptions.
What happens if I forget my master password?
If you forget your master password, you usually cannot recover your vault because the encryption is designed so that no one, including the company, can unlock it without that password. Some managers offer recovery options like a recovery key or emergency access, but these must be set up in advance.
Is it safe to store all my passwords in one place?
Yes, because the vault is encrypted with strong encryption, so even if the company's servers are breached, attackers cannot read your passwords without your master password. The bigger risk is your own device being compromised or your master password being weak or reused.
How does a password manager fill in my passwords on websites?
A password manager uses a browser extension or mobile app to detect login forms. When you visit a site, it matches the site's address to an entry in your vault, decrypts the password, and automatically fills it into the form, often after you unlock the vault with your master password or biometrics.
Can I use a password manager for free?
Many password managers offer free versions that store passwords on a single device, while paid versions typically add syncing across devices, sharing, and advanced security features. Free options can be secure, but they may have limitations on the number of passwords or devices.

Part of the guide: How the Internet Works →