The password tower · the atrium

Password manager: the tower, floor by floor

This is the entrance to the password manager tower. It settles nothing down here — it shows you what is upstairs and puts you on the right floor.

Nearly everyone arrives from the same place. There are too many accounts, one password is doing most of the work, and something has happened — a warning in a browser, a message about a service that was breached, a friend whose account started sending things. The floors above split that into the parts you can actually act on: where the passwords live, what you add on top of them, the physical objects that do the job better than anything else, and what to do on the day one gets out.

Two rules hold for every floor. Anything a manager claims about itself is quoted from its own documentation with the date we read it, because these products change what they include and an undated claim quietly stops being true. And nothing is ranked until we have paid for the accounts, used them across a phone and a computer for two weeks, and tried the part nobody tests — getting the data back out again.

Three levels, and you are on the first. This atrium lists the floors; a floor covers one thing completely and holds the smaller guides underneath it; those answer a single question in a few minutes. Nothing here is more than three clicks from the front door.

What this tower will not do

It will not tell you the best password manager. That verdict needs paid accounts, two weeks of ordinary use on more than one device, and an honest account of what broke — including the export, which is the step that decides whether you are a customer or a hostage.

It will not carry affiliate links, on any floor, ever. This category pays well for recommendations, and a recommendation that is paid for is not a recommendation.

And it will not tell you that a manager makes you safe. It removes one enormous problem — the same password everywhere — and leaves the others standing. The floors say which ones.

There is one thing worth knowing before you climb any of these stairs, because it is the same on every floor and nobody puts it on a sales page. Whichever manager you choose, you are moving from a situation where losing one password costs you one account, to a situation where losing one password costs you all of them. That trade is overwhelmingly worth making — but it is a trade, and it has a condition attached. The master password has to be long, it has to be used nowhere else, and it has to exist somewhere outside your head: written on paper, in a drawer at home, in handwriting. Every floor in the managers wing repeats that condition, because the most common way people lose a vault is not an attacker. It is a memory. What holds instead is simple: no rankings until we have paid for the accounts ourselves and used them for two weeks, and no affiliate links ever.