Use a built-in password manager if your devices and main browser stay within one provider’s ecosystem and ease of use matters most. If you regularly switch browsers or operating systems, or need controlled sharing or emergency access, consider a third-party manager and check its exact plan and device support. The National Cyber Security Centre recommends passkeys wherever available, but you still need recovery options for accounts and devices that require them.
If you move between phones, computers and browsers, check that your credentials will be available in each one. The National Cyber Security Centre identifies a complex mix of devices and browsers as a reason to consider a reputable third-party manager.
If you share selected logins or want a trusted person to help with access, compare sharing permissions with recovery permissions. Apple, Bitwarden and 1Password describe different arrangements, so neither feature should be assumed from the other.
If you want to use passkeys on eligible accounts, check where they will be stored and how you will regain access after losing a device. Keep a workable sign-in route for services that still require passwords or recovery codes.
Choose how to manage passwords across your usual devices and browsers first; then check sharing, recovery and passkey support. A hardware security key can be an additional option for accounts that support it, rather than a replacement for managing every login.
Choose when: Most of your sign-ins stay within one browser or device provider and you want less setup.
Trade-off: Check access in other browsers and on other devices rather than assuming the same coverage everywhere.
Choose when: You regularly cross browsers or operating systems, or need a particular sharing or emergency-access feature.
Trade-off: Browser support, recovery arrangements and feature eligibility vary by service and plan.
| Concern | What to check | Who this matters to |
|---|---|---|
| Access across devices | Check each browser and operating-system version you use, including extension and mobile autofill support. | If I switch between browsers and devices, I need my logins available without being tied to one setup. Around 33% of consumers put this continuity first. |
| Recovery and sharing | Check who can recover the account, what a shared member can change and whether emergency access is view-only or takeover. | When I share household logins, I need to know who retains access and who can help if I am locked out. For around 27% of consumers, recovery and controlled sharing are the main concern. |
| Password and passkey use | Check password generation, passkey support for your services and the available recovery routes. | Remembering separate logins is a burden, so I want fewer passwords to manage without losing access to accounts that still need them. Around 27% of consumers prioritise reducing that friction. |
| Hardware-key compatibility | Check the account’s FIDO2 support, your device connection options and recovery if a key is lost. | If I want a separate physical authenticator, it must work with the specific accounts and devices I use. That is the primary need for around 13% of consumers. |
Support can depend on specific browser, extension, app and operating-system versions. 1Password also documents a separate trusted-browser setup for additional desktop browsers.
List the browsers and devices you actually use, then check the manager’s current requirements before moving your main accounts.
Bitwarden says takeover access replaces the master password and removes existing two-step login methods. Its emergency-access feature also requires an eligible plan and advance setup.
Choose the least powerful access level that meets your need, select the contact carefully and review the arrangement when circumstances change.
Apple warns that removing someone from a shared group may not prevent them from using credentials shared while they belonged to it.
Share only accounts intended for joint use, and change an account’s password when a former member should no longer have access.
Passkey availability depends on the service and compatible devices. Some accounts still need passwords, codes or a recovery route.
Use passkeys where supported, retain secure recovery options and avoid setting up a passkey on a shared device.
A built-in route for people using Android and Chrome with the same Google Account.
A built-in route for people primarily using compatible Apple devices, including those who need shared credential groups.
A third-party option for people considering formal emergency access alongside their device requirements.
A third-party option for people checking multi-browser support and family-account recovery arrangements.
Use the built-in option if it covers the devices and browsers you rely on and ease of use is your priority. The National Cyber Security Centre suggests considering a reputable third-party manager for a complex mix of devices and browsers; check the exact service for any sharing or recovery feature you need.
Set up the contact and permission level before access is needed. For Bitwarden, check eligibility, any waiting period and whether view or takeover access fits your intention: takeover replaces the master password and removes existing two-step login methods.
You can remove a member from a compatible Apple shared-password group, but removal may not stop them using credentials shared while they were a member. Change the underlying password if they should no longer access that account.
No. The National Cyber Security Centre recommends passkeys where available, but services do not all offer them. GOV.UK One Login notes that a password and security code may still be needed as a backup if a passkey is lost.
Avoid setting up a passkey on a device shared with other people. GOV.UK One Login warns that someone who can unlock that device may be able to use the passkey.