
The Future of Passwords: Passkeys Explained
Passwords have had a good run and a terrible one. They’re hard to remember. Sites make you add symbols and numbers until the password looks like ancient runes. Then it leaks in a data breach anyway.
Paid password manager with a local Secret Key and Travel Mode. Suits households, as its Families plan covers five members and five guests.
1Password sits at the premium end of the password-manager market on the strength of its security model. Every vault is locked with a combination of your account password and a 128-bit Secret Key that is generated on your device and never sent to 1Password's servers. If an attacker took the entire server-side database, the data would still be unreadable without that local key.
The company has commissioned more than two dozen independent third-party audits and holds current SOC 2 Type 2 certification. To date no customer vault has been breached. The feature set leans toward households and travelers.
Watchtower continuously checks for breach exposure against Have I Been Pwned, along with weak passwords and missing 2FA, and does the evaluation locally on the device. Travel Mode is the more unusual feature. Before crossing a border, you flag which vaults are safe for travel.
The rest are removed from your devices entirely until you restore them on the other side. Passkey support is live across Chrome, Firefox, Edge, Brave and Safari, with biometric login on macOS, iOS, Windows Hello and Android. Pricing is the main drawback.
There is no free tier, just a 14-day trial. Individual plans start at $2.99 / £2.50 a month. The Families plan covers up to five members and five guests from £2.50 a month, with additional people at $1 each per month.
Reviewers generally rate it the cleanest household setup in the category. Trustpilot users have reported a roughly 30% subscription price rise during 2024-25 with limited notice. Support is email and forum only, so resolution can take days.
Some privacy-focused users factor in that 1Password is incorporated in Canada, a Five Eyes signals-intelligence partner. The Secret Key model also means one more recovery file to look after, the Emergency Kit PDF. If you lose it, the vault is unrecoverable.
We'd also avoid storing TOTP codes alongside passwords in the same vault, because a single master-password compromise would then expose both factors at once. For most households willing to pay for that level of security, 1Password is the easiest paid option to recommend.
Encryption standard for stored passwords
Support for 2FA/MFA security
Support for fingerprint and face recognition
Monitors for compromised passwords
Provider cannot access your master password
Regular third-party security audits
Notifications when accounts are compromised
Built-in strong password generator
Ability to securely share passwords with others
Grant emergency access to trusted contacts
Checks for weak or reused passwords
Store encrypted notes and documents
Auto-fills credit cards and personal info
Temporarily remove sensitive data
Store encrypted files and documents
Are apps open source?
Syncs passwords across all devices

Passwords have had a good run and a terrible one. They’re hard to remember. Sites make you add symbols and numbers until the password looks like ancient runes. Then it leaks in a data breach anyway.

If you’re still using the same password for multiple accounts, it’s time for an intervention.

A password manager is usually a smarter choice than browser autofill, especially if you care about your accounts and your money.
Password manager whose Premium plan includes Hotspot Shield VPN at no extra cost. Best suited to households that will use the bundled VPN.
Password manager built on XChaCha20 encryption and audited twice by Cure53. Its Family plan suits households that want strong security at a low price.
Advanced password manager built around powerful form filling, with secure sharing and comprehensive security features.
Detailed feature analysis, performance, and pricing comparison
Security protocols, server networks, and streaming capabilities compared
Speed, privacy policies, and what users report