Thinking Thinking

Answers

Are password managers safe?

Yes, and the honest answer names the threats they do not cover: malware on your device, phishing you type into, session theft and losing your own master password.

By Thinking Desk 3 min read

Key takeaways

  • A reputable password manager is safe enough, and safer than password reuse, a phone note or a shared spreadsheet.
  • It protects against password reuse, weak passwords and a breach at the vendor, because the vault is encrypted on your device before upload.
  • It does not protect against malware on your own machine, credentials you paste into a phishing page, stolen session cookies, or losing your own master password.
  • The LastPass vaults were copied from a server backup in 2022, which is why key derivation settings and unencrypted metadata decide how bad a breach is.
  • Passkeys are the one upgrade that removes phishing from the equation, because they are bound to the website origin.
On this page
  1. Short answer
  2. What it protects against
  3. What the LastPass breach proved
  4. What it does not protect against
  5. How to use one safely

Short answer

Yes, a reputable password manager is safe enough, and safer than anything you would realistically use instead. The honest version has a boundary. It protects a stored secret against a vendor breach and against password reuse.

It does not protect you against malware on your own machine, against a phishing page you type into, against a stolen session cookie, or against losing your own master password.

What it protects against

Password reuse, which is the attack that actually empties accounts: one leaked list replayed against a hundred sites. A manager makes every password unique, so one breach stays one problem.

Weak passwords, because a generated 20-character string is not guessable.

And a breach at the vendor itself, if the design is zero-knowledge. Your vault is encrypted on your device before upload, so the vendor stores ciphertext it cannot read. How long that ciphertext holds is decided by key derivation: Bitwarden defaults to PBKDF2-SHA256 at 600,000 iterations or Argon2id at 32 MiB, Keeper runs PBKDF2 at 1,000,000 iterations, and 1Password adds a 128-bit Secret Key that never leaves your devices, which leaves a stolen database with nothing to attack offline.

Weekly, Thursday morning, Central European Time.

The Thinking briefing

One email a week: what changed in European business software, which prices moved, and which comparison we published. No sales mail.

We store your address to send the briefing. One click unsubscribes you, and we never pass it on.

What the LastPass breach proved

In August 2022 attackers took source code and internal secrets from a LastPass engineer. In a second, connected intrusion running to October 2022 they used keys from a DevOps engineer's home machine to copy backups of customer vaults. On 22 December 2022 LastPass disclosed that vault data had been copied, including unencrypted fields such as site URLs.

It did not prove managers are unsafe. It proved that the realistic threat is a copy of the encrypted vault rather than a guessed master password, that unencrypted metadata tells attackers which vaults are worth the compute, and that a vendor publishing dated audits by firm and year is making a claim you can check.

What it does not protect against

Malware on your device. Code running as you can read the vault after you unlock it or capture the master password as you type. Nothing in a vault is safer than the machine that unlocks it.

Phishing, only partly. Autofill will not fill credentials on a mismatched domain, but it will not stop you copying a password into a convincing fake. Passkeys do solve this, because they are bound to the site origin.

Your own master password. Zero knowledge means the vendor genuinely cannot recover it. No recovery kit, no data.

Session theft. Most modern account takeovers never touch your password. That is how 1Password's Okta tenant was compromised in October 2023, through a stolen session cookie belonging to an IT employee, with no user data accessed according to its investigation.

A vendor you cannot verify. No published audits, no documented key derivation and no readable pricing is a request for trust that has not been earned.

How to use one safely

  1. Give the manager a long unique passphrase, stored on paper and nowhere digital.
  2. Turn on two-factor authentication, preferring a hardware key or passkey over SMS.
  3. Move email, bank, registrar and cloud accounts to passkeys where offered.
  4. Configure recovery before you need it, through emergency access, an Emergency Kit or a family organiser.
  5. Keep the device patched, because the endpoint is the weak point.

The alternative to a password manager is not perfect security, it is a reused password or a spreadsheet. We ranked the products on audits, hosting and price in the best password managers in 2026, and the two most-compared options meet in 1Password vs Bitwarden.

Questions and answers

Can a password manager be hacked?
The vendor can be breached, and it has happened: LastPass customer vault backups were copied in 2022. In a zero-knowledge product the attacker gets ciphertext, so the question becomes how long that ciphertext resists. That is decided by key derivation, for example Bitwarden's 600,000 PBKDF2 iterations, Keeper's 1,000,000, or 1Password's 128-bit Secret Key that never leaves your devices.
What happens if I forget my master password?
In a true zero-knowledge product, the vendor cannot recover it and your data is unreadable. That is why you configure recovery before you need it: Bitwarden's emergency access with a trusted contact and a waiting period, 1Password's printable Emergency Kit, or a family organiser who can restore a member's account.
Is a browser password manager safe enough?
It is better than reusing one password and worse than any dedicated product. Browser vaults are tied to a single browser profile, rarely publish dated third-party audits, and usually cannot share a credential with a colleague under an access policy. Apple's Passwords app is the exception worth considering, because it is a system-level store with shared groups.
Do passkeys replace a password manager?
Not yet, they change what it stores. Passkeys are bound to a website origin, so phishing stops working on accounts that use them, and that is a genuine improvement over any password. But most services still require a password, so you need somewhere to keep both. Every major manager now stores passkeys alongside passwords.

Sources

Every price and fact above was checked against these pages on the date shown.

  1. [1] 2022 LastPass data breach, timeline and December 2022 disclosure accessed 2026-11-11
  2. [2] Bitwarden KDF algorithms, PBKDF2 600,000 iterations default and Argon2id parameters accessed 2026-11-11
  3. [3] About 1Password security, two-secret key derivation and AES-GCM-256 accessed 2026-11-11
  4. [4] Is Bitwarden audited? Audit list by firm and year accessed 2026-11-11
  5. [5] 1Password discloses security incident linked to Okta breach, BleepingComputer, October 2023 accessed 2026-11-11
  6. [6] Keeper security model, PBKDF2 1,000,000 iterations and zero-knowledge architecture accessed 2026-11-11
Topics password-managersecuritythreat-modelpasskeys