Password managers explained: NordPass vs 1Password vs Proton Pass

Most people still use a handful of passwords across dozens of accounts — and that one habit is what turns a single data breach into a chain of hacked accounts. A password manager fixes it: it creates a strong, different password for every site, remembers them all and fills them in for you. This guide explains how password managers work and who needs one, compares NordPass, 1Password and Proton Pass using their own published plans and documentation, and walks you through switching in about an hour without locking yourself out.

What a password manager does

A password manager is an encrypted vault for your logins. You remember one strong master password; the app remembers everything else.

CISA sums up a strong password as long, random and unique: at least 16 characters, either a random mix of letters, numbers and symbols or a passphrase of 4–7 unrelated words — and a different one for every account. Nobody can do that from memory for 100 accounts, and writing passwords down or saving them in a file isn't safe either. That gap is exactly what a password manager fills. Day to day, it:

• generates long, random passwords in one tap;
• autofills and autosaves logins in your browser and phone apps;
• syncs across your devices;
• flags weak, reused or leaked passwords so you know what to fix first;
• stores card details, secure notes, Wi-Fi passwords and passkeys.

All three managers in this guide encrypt your vault so that, by their own description, the company can't read it. NordPass and Proton Pass call this a zero-knowledge design; 1Password explains that it never has your Secret Key, so data on its servers can't be decrypted without it.

Is a password manager right for you?

It's a clear fit if you:

• reuse the same password, or small variations of it, on more than one site;
• have more accounts than you can count — email, banking, shopping, work, government services;
• share logins with family and want to stop sending passwords by text message;
• use a mix of devices, say a Windows laptop and an iPhone.

You may not need a paid one if you:

• use one browser and are happy with its built-in password manager — CISA lists free built-in browser managers as a valid option;
• only need the basics for one person. Proton Pass Free or NordPass's free app may be all you need.

A dedicated manager earns its place when you want it to work across every browser and operating system, with family sharing, security reports and extras such as a built-in authenticator.

The three at a glance

NordPass: simple, from the makers of NordVPN

NordPass is built by Nord Security, the company behind NordVPN. Its Apple App Store listing describes:

• Encryption: XChaCha20 with a zero-knowledge architecture and Argon2id key derivation, audited by the security firm Cure53.
• Storage: unlimited passwords, passkeys, credit cards, Wi-Fi codes and documents, with autofill and autosave.
• Security checks: Password Health flags weak and reused passwords; the Data Breach Scanner alerts you if your logins, emails or payment cards appear in known security incidents.
• One-time codes: the built-in NordPass Authenticator generates two-factor codes and can autofill them.
• Unlock and switching: Face ID, Touch ID or a security key, plus import tools for browsers and other managers.

The app is free to download. NordPass's pricing page shows what each plan includes: Free covers one user with autosave and autofill, the password generator, import and biometric unlock, while Password Health, the Data Breach Scanner, the authenticator, email masking, file attachments, Emergency Access and simultaneous sign-in on several devices need Premium (1 user) or Family (6 user accounts). Free includes a 30-day Premium trial, and the paid plans come with a 30-day money-back guarantee (as of October 2026).

Pros: modern encryption, breach alerts and an authenticator in one app, free to start. Cons: breach alerts, Password Health and the authenticator need Premium or Family, and Free doesn't allow simultaneous sign-in on several devices.

1Password: polished, with an extra Secret Key

1Password has no free plan, but both personal plans come with a 14-day free trial with no credit card required (as of October 2026).

• Individual: one person, 1 GB of storage, password generation, autofill, secure item sharing, apps on all your devices and Watchtower alerts.
• Families: everything in Individual for up to 5 people, with unlimited shared vaults, simple admin controls and 1 GB per person.

Its standout is the Secret Key. When you create your account, 1Password generates it on your device and combines it with your account password to encrypt your data. 1Password says the key has about 128 bits of entropy and that it never has a copy, so data on its servers can't be decrypted without it. The flip side: 1Password can't recover your Secret Key, and it isn't a backup for a forgotten password — which is why the Emergency Kit matters (Step 2).

Watchtower flags weak and reused passwords, logins on sites with a reported breach, sites where you could add a passkey or two-factor authentication, and expiring cards and documents. Importing is well supported: browsers, Bitwarden, Dashlane, KeePass, Keeper, LastPass, RoboForm and any CSV file.

Pros: a mature app, the extra protection of the Secret Key, strong family sharing, wide import support. Cons: no free plan, and the promotional price is for new customers' first year on annual billing, bought on 1Password.com — not through app stores.

Proton Pass: the strongest free plan

Proton Pass comes from Proton, the Switzerland-based company behind Proton Mail and Proton VPN. Proton says Pass uses zero-knowledge, end-to-end encryption, that its apps are open source and independently audited, and that it runs on Windows, macOS, Linux, Android, iOS and the web, with extensions for Chrome, Safari, Firefox, Edge and Brave.

• Free ($0, no credit card): unlimited logins, notes and cards on unlimited devices, passkeys, a password generator, weak and reused password alerts, import, 2 vaults, sharing with 2 people and 10 hide-my-email aliases.
• Pass Plus: unlimited aliases, 50 vaults, a built-in two-factor authenticator, Dark Web Monitoring, and sharing with up to 10 people.
• Pass Family: everything in Pass Plus for up to 6 users, with a family admin panel.
• Proton Unlimited: Pass Plus together with Proton's other paid apps.

Hide-my-email aliases let you give each shop or newsletter a random address that forwards to your inbox. If one starts receiving spam or shows up in a breach, switch it off — your real address stays private.

Pros: a genuinely usable free plan, open-source apps, email aliases, every major platform. Cons: the authenticator and Dark Web Monitoring need Pass Plus or higher; Free is limited to 2 vaults.

Plans and pricing

Prices checked October 2026 on Proton's, 1Password's and NordPass's sites — promotions change, check the final price at checkout. VAT or sales tax may be added.

If you sign up through our links we may earn a commission — it never changes what we recommend.

Step 1 — Choose a manager and create your account (10 minutes)

1. Pick with the table above. Starting free → Proton Pass Free or NordPass's free app. A family → 1Password Families (5 people) or Proton Pass Family (6 users). Unsure → try 1Password's 14-day trial or Proton Pass Free for a week.
2. Sign up on the provider's own website, so you see the full plan details and any web-only pricing.
3. Create your master password: at least 16 characters, or a passphrase of 4–7 unrelated words, as CISA advises — and never used anywhere else.

Step 2 — Save your recovery details (5 minutes)

1. 1Password: download your Emergency Kit. It holds your Secret Key, and 1Password suggests printing a copy and keeping it somewhere secure, such as with your passport and other important documents.
2. NordPass or Proton Pass: set up every recovery option the app offers and store any recovery code offline.

Step 3 — Install the apps and extensions (10 minutes)

1. Install the desktop app and browser extension, then sign in.
2. Install the phone app and sign in.
3. In your phone's settings, choose the manager as your autofill service (search Settings for "AutoFill" or "Passwords").
4. Turn on Face ID, Touch ID or fingerprint unlock.

Step 4 — Import your existing passwords (15 minutes)

1. Export from your browser or old password manager — most create a CSV file.
2. Import into the new manager. 1Password handles CSV imports on 1Password.com, and on iOS/iPadOS 26+ or Android 14+ offers "Migrate data into 1Password". Proton Pass includes import on every plan, including Free, and NordPass's app includes import tools.
3. Spot-check your email, your bank and three sites you use daily.
4. Delete the export file and empty your trash or recycle bin.
5. Turn off password saving in your browser, then delete the old saved passwords once everything has moved.

Step 5 — Fix your weakest passwords first (30 minutes, then a few a week)

1. Open the security report: Password Health in NordPass Premium, Watchtower in 1Password, or the weak and reused password alerts in Proton Pass.
2. Change passwords in this order: email first (it can reset everything else), then banking, your mobile carrier and the accounts you use most.
3. Let the generator create each new password — CISA's minimum is 16 characters, and longer is stronger.
4. If you get a breach alert, change that password the same day.

Step 6 — Turn on two-factor authentication and try passkeys (15 minutes)

1. Switch on two-factor authentication for email, social media and financial accounts first — the accounts CISA highlights.
2. Store the codes: NordPass Premium and Family include a built-in authenticator, Proton Pass Plus includes one, and 1Password's Watchtower flags sites where you haven't saved a one-time password yet.
3. Try a passkey. When a site offers "Create a passkey", save it in your manager. A passkey signs you in with a cryptographic key instead of a password, so there's nothing to type and nothing to phish.
4. Share with family through shared vaults instead of messages.

Mistakes to avoid

• A short or reused master password. It protects everything else.
• Skipping the recovery step. Without recovery details, a forgotten master password can mean a lost vault.
• Leaving the CSV export on your computer after importing.
• Keeping passwords in two places. Browser saving left on creates duplicates that never get fixed.
• Importing and stopping there. A vault full of weak, reused passwords is tidier, not safer.
• Ignoring the renewal price. First-year prices can renew higher.

FAQ

Is it safe to keep all my passwords in one place?

That's the trade-off password managers are designed around. Your vault is encrypted, and these companies say they can't read it; 1Password adds a Secret Key so that even its server data can't be decrypted without it. One well-protected vault is far safer than reusing a few passwords everywhere — which is why CISA recommends it.

What happens if I forget my master password?

It depends on the recovery options you set up. 1Password, for example, can't recover your Secret Key and says it isn't a backup for a forgotten password. That's why you save your recovery details on day one.

Is a free password manager good enough?

For one person, often yes. Proton Pass Free includes unlimited logins on unlimited devices, passkeys and 10 email aliases (as of October 2026), and CISA notes that free built-in browser managers are an option too. Paid plans add family sharing, more vaults, breach monitoring and an authenticator.

Can I switch to another password manager later?

Yes. Export from the old manager, import into the new one, then delete the export file. 1Password alone lists imports from browsers, Bitwarden, Dashlane, KeePass, Keeper, LastPass, RoboForm and any CSV file.

Do passkeys replace password managers?

Not yet. Many sites still only use passwords, so you'll keep needing both for years — and a password manager can hold passwords and passkeys in one place.

Ready to choose?

Pick the line that sounds most like you, then confirm the plan details and renewal price before you pay.

• Want a simple app from the company behind NordVPN, with breach alerts and a built-in authenticator: NordPass.

• Want a polished app for your household and the extra protection of a Secret Key: 1Password.

• Want to start free, or care most about privacy and email aliases: Proton Pass.

Switching takes about an hour, and you'll feel the difference the first time you sign in without typing a password. Set a strong master password, save your recovery details, import your logins and fix your email password first — after that, every new account gets a strong, unique password automatically.