Be honest: how many of your online accounts use the same password? If the answer is “most of them,” you’re in good company. It’s the number one thing I see when I sit down at kitchen tables around Strasburg, Byers, and Bennett. And with holiday shopping season starting, it’s the perfect time to fix it.
The fix isn’t memorizing 80 different passwords. It’s letting a password manager remember them for you, and using passkeys wherever you can. Here’s what both of those are, which free options are worth using, and how to set it all up in an afternoon.

Why Reusing Passwords Is So Risky
Websites get hacked all the time, and when they do, lists of email addresses and passwords end up for sale. Crooks then try that same email and password on banks, Amazon, Facebook, and email accounts. If you reuse one password, one breach at some little website you forgot about can unlock everything. A strong password helps, but it isn’t enough on its own. I cover that in more detail in Myth #5: Strong Passwords Are Enough to Stay Safe.
What a Password Manager Actually Does
A password manager is a secure, encrypted vault for your logins. You remember one strong master password (or unlock it with your fingerprint or face), and it does the rest:
- Creates long, random, unique passwords for every site.
- Fills them in automatically on your computer and phone.
- Syncs across your devices so you’re never locked out on the road.
- Warns you when a password is weak, reused, or shows up in a known data breach.
- Only fills on the real website, which helps protect you from look-alike scam sites.
Good Free Options in 2026
You don’t need to spend money to get started. These are the ones I’m comfortable recommending:
- Bitwarden (free plan): My pick for most households. Unlimited passwords on unlimited devices, works on Windows, Mac, iPhone, Android, and every major browser, and supports passkeys.
- Apple Passwords: Built into iPhone, iPad, and Mac (iOS 18 and macOS Sequoia or newer). Great if your family is all-Apple. On a Windows PC it works through the iCloud for Windows app, but it doesn’t work on Android.
- Google Password Manager: Built into Chrome and Android. Simple if you live in Chrome. You can see everything at passwords.google.com.
- Microsoft Edge’s built-in password manager: Fine for folks who only use Edge and a Microsoft account.
The best password manager is the one your whole family will actually use. If you have a mix of iPhones, Android phones, and Windows PCs, a standalone option like Bitwarden saves headaches. If you’d rather pay for extras like family sharing and built-in two-factor codes, the paid plans from Bitwarden or 1Password are reasonably priced.
Passkeys: The Password You Never Type
A passkey replaces your password with the same thing you already use to unlock your phone or computer: your fingerprint, face, or PIN. There’s nothing to type, so there’s nothing for a scam website or a fake text message to steal. Passkeys have gone mainstream: the FIDO Alliance reported in 2026 that more than one in three sign-ins on participating sites now use a passkey.
Here’s where to turn them on for the big three accounts:
- Google: Go to myaccount.google.com/signinoptions/passkeys and choose Create a passkey.
- Microsoft (Outlook, Hotmail, Xbox): Go to account.live.com/proofs/manage, choose Add a new way to sign in or verify, then pick Face, Fingerprint, PIN, or Security Key.
- Amazon: Go to Your Account, then Login & security, and select Set up next to Passkeys.
Tip: Only create passkeys on phones and computers you personally own. Anyone who can unlock that device can get into the account. Your phone also needs a screen lock turned on.

Your Afternoon Setup Plan
- Pick one password manager and install it on your computer, your phone, and your browser.
- Create a master passphrase: four or five random words strung together is long and easy to remember. Write it down once and keep it somewhere safe at home, not on your computer.
- Import the passwords already saved in your browser. Most managers walk you through this.
- Turn on two-step verification for your email, bank, and the password manager itself.
- Change your most important passwords first: email, banking, Amazon, and Facebook. Let the manager generate new ones.
- Add passkeys to Google, Microsoft, and Amazon using the steps above.
- Work through the rest slowly. Each time you log in to an old site, let the manager update that password.
Your email account is the most important one to protect, because it’s how every other password gets reset. If someone gets into your email, they can take over almost everything else. I’ve helped plenty of folks recover hijacked accounts. My Facebook account hacked guide shows how painful that can be, and how to lock things down afterward.
Don’t Forget an Emergency Plan
Make sure a trusted family member knows how to get in if something happens to you. Bitwarden has an emergency access feature on paid plans, and Apple lets you add a legacy contact to your Apple Account. At the very least, keep your master passphrase and recovery codes written down in a safe place at home.
Want Help Getting Set Up?
Setting up a password manager for the whole family is one of the best security upgrades you can make, and it’s a lot easier with someone walking you through it. Carl the Computer Guy helps folks in Strasburg, Byers, Bennett, Watkins, Deer Trail, and all along the I-70 corridor get their passwords and passkeys organized, in person or remotely. Give me a call at 720.281.4990 and we’ll get you set up before the holiday shopping rush.
Recent Comments