1. Choose for your actual routine
Check whether the manager works on your phone and computer, how devices synchronise and which features are free or paid. A manager built into your browser can also be suitable. Understandable controls, maintained software and protected access matter more than collecting features. Install additional software through the official provider or the appropriate app store. Avoid saving personal passwords on a public computer or on a shared computer where other people can access them without protection.
2. Protect entry before moving anything
Follow the manager’s official setup instructions. If it needs a main password, use a strong, unique password that you do not use elsewhere. Enable the additional protection it offers and check the recovery process. Keep any designated emergency code protected somewhere you can reach without first opening a locked manager. Also secure the account used to synchronise your data. A device lock and software updates remain important after the manager has been installed; the application does not replace them.
3. Learn the process, then choose three important accounts
In this fictional example, Nils first tries saving and signing in again with a less important account. He then works on his main email, a frequently used shopping account and another important account. He opens each provider himself, generates a separate password and changes it in that service’s settings. Only then does he confirm the updated manager entry. He checks that the new login works before removing earlier working ways to regain access.
4. Importing is optional
You can also add accounts individually as you next use them. If you import existing passwords, read the instructions for both applications involved. An exported CSV file can contain readable passwords; it is not a protected vault. Do not send it through email or chat, or leave it in a publicly shared folder. Check some entries after the import. Then remove the temporary export file and check the recycle bin and any synchronised copies. Ordinary deletion cannot guarantee complete destruction of data across every storage system.
5. Check working protection, not just the entry count
A long list of saved logins does not show whether their passwords are different. Replace reused passwords at the relevant service and keep the saved entry up to date afterwards. If the service supports passkeys, consider that option and its recovery arrangements. Delete the previous password store only after the accounts you need work in the new system. Workplace accounts follow your organisation’s rules; do not independently transfer them into a personal manager.
Your checklist
The checkboxes are for your own reference. No entries are sent to us. To keep a copy, print the page or save it as a PDF using your browser menu.
Common questions
Do I need to change every old password immediately?
For a preventive move, you can work in order of importance. If a password has been exposed or an account is being misused, do not wait for your migration timetable. Secure the affected accounts and every account using that same password promptly through official channels.
Why does a password fail after I save it?
You may have changed only the entry in the manager. The service itself would still expect the previous password. Check the provider address and username, then use official recovery if necessary. Repeated guessing or an unsolicited account-repair service will not solve that mismatch.
Can support always recover a forgotten main login?
No. Recovery depends on the manager and the arrangements you made beforehand. Do not assume its provider can simply open a protected vault. Read the recovery instructions before migrating and protect designated emergency information somewhere other than exclusively inside that same vault.
Sources and further information
Primary sources from public authorities, consumer organisations and providers. A source may be in another language; follow the guidance that applies to your service and where you live.
- NCSC: Password managersSource review date:
- Google Chrome Help: Import or export passwords and passkeys with ChromeSource review date:
- BACS: Konto gehacktSource review date:
