Why You Need a Password Manager
The problem: Average Australian has 100+ online accounts. Using same password for everything is dangerous - when one site is breached, hackers try that password everywhere.
The solution: Password manager generates and stores unique strong passwords for every account. You only remember one master password.
Benefits:
- Security: Unique 20+ character passwords for every site
- Convenience: Auto-fill passwords on any device
- Safety: Password managers detect phishing sites
- Sharing: Securely share passwords with family
- Alerts: Notified when your passwords appear in breaches
Choosing Your Password Manager
| Provider | Rating | Speed | Price | Features | Action |
|---|---|---|---|---|---|
| 1Password | 4.7 | $5/month |
| Try it → | |
| Bitwarden | 4.5 | Free / $1.50/month |
| Try it → | |
| Dashlane | 4.3 | $6/month |
| Try it → |
Our recommendation:
- Beginners: 1Password ($5/month) - easiest to learn
- Budget: Bitwarden (free) - excellent features at no cost
- Families: 1Password Families ($8/month for 5 people)
Complete Setup Tutorial
Setting Up 1Password (30 Minutes)
Create account and choose plan
Visit 1password.com and click 'Get Started'. Choose Individual ($5/month) or Family ($8/month for 5 people). Enter email address and create account. 1Password offers 14-day free trial.
Create your master password
This is the ONLY password you'll need to remember. Make it strong but memorable. Use 4-5 random words (correcthorsebatterystaple) or a passphrase. Write it down and store in secure location until memorized. DO NOT store digitally.
Download apps on all devices
Install 1Password on: computer (Mac/Windows), phone (iOS/Android), and browser extension (Chrome/Firefox/Safari). Sign in with your master password on each device.
Import existing passwords
1Password can import from Chrome, Safari, Firefox, LastPass, or CSV file. Click Settings > Import, select source, follow prompts. Most users have 50-200 passwords imported automatically in under 2 minutes.
Enable two-factor authentication
Go to 1Password account settings and enable 2FA using authenticator app (Authy or Google Authenticator). This requires second code when signing in on new devices. Critical security step.
Set up browser extension
Browser extension auto-fills passwords on websites. Click extension icon, sign in, grant permissions. Test by visiting a saved login - should auto-fill automatically.
Add emergency contact
1Password lets you designate trusted person who can access your vault if something happens to you. Go to Settings > Family/Emergency Access and add trusted contact.
Start using for new accounts
When creating new account, let 1Password generate random 20-character password. Save to vault. Never reuse passwords across sites.
Master Password Best Practices
Your master password is the only password you need to remember. Make it strong:
Good examples:
CorrectHorseBatteryStaple(4 random words)Sydney-2025-Coffee-Beach(memorable phrase)MyDog!Ate3Kangaroos@Home(personal story)
Bad examples:
password123(too common)JohnSmith1980(personal info)qwerty(keyboard pattern)
Requirements:
- At least 12 characters (20+ better)
- Mix of letters, numbers, symbols
- Not found in dictionary
- Not reused from other accounts
Memory tip: Write it down on paper and keep in wallet for first week. Once memorized, destroy the paper.
Importing Passwords from Browsers
From Google Chrome
- Open Chrome, go to
chrome://settings/passwords - Click three dots next to "Saved Passwords"
- Select "Export passwords" and save CSV file
- In 1Password: Settings > Import > Chrome CSV
- Select downloaded file, click Import
- Delete CSV file after import
From Safari (Mac)
- Open Safari, go to Preferences > Passwords
- Select all passwords, click Export
- Save CSV file (requires Mac password)
- In 1Password: Settings > Import > Safari CSV
- Delete CSV file after import
From Firefox
- Open Firefox, go to
about:logins - Click three dots menu, select "Export Logins"
- Save CSV file
- In 1Password: Settings > Import > Firefox CSV
- Delete CSV file
Security note: CSV files contain unencrypted passwords. Delete immediately after import and empty trash.
Securing Your Password Manager
Enable Two-Factor Authentication (2FA)
Why: Even if someone steals your master password, they can't access account without 2FA code.
How to set up:
- Download authenticator app (Authy or Google Authenticator)
- In 1Password settings, enable 2FA
- Scan QR code with authenticator app
- Save backup codes in safe place (not in 1Password itself)
Important: Store backup codes on paper or separate device. If you lose phone, backup codes are only way to regain access.
Use Security Key (Advanced)
What: Physical USB device (like YubiKey) required to sign in
Advantages:
- Strongest security (phishing-proof)
- No codes to type
- Works offline
Cost: $25-50 for YubiKey
Setup: 1Password settings > Two-Factor Auth > Security Key
Set Up Travel Mode
What: Temporarily remove sensitive vaults from devices before crossing borders
Why: Some countries (US, Australia) can demand device access at borders. Travel Mode lets you hide sensitive passwords.
How:
- Mark vaults as "Safe for Travel"
- Enable Travel Mode before trip
- At border, only travel-safe vaults visible
- Disable after clearing customs
Enable Watchtower
What: Monitors your passwords for security issues
Alerts you when:
- Password appears in data breach
- Website has security vulnerability
- Password is reused across sites
- Password is weak
- 2FA available but not enabled
How: Built into 1Password, check Settings > Watchtower
Using Password Manager Daily
Auto-Fill on Websites
Desktop:
- Visit website login page
- Click password field
- 1Password icon appears
- Click icon, select account, auto-fills
Mobile:
- Tap password field
- Keyboard shows "Passwords" option
- Unlock with Face ID/fingerprint
- Select account, auto-fills
Generating New Passwords
When creating new account:
- Enter username/email
- Click password field
- 1Password offers to generate password
- Accept suggested password (20 characters, random)
- Save new login to vault
Never create your own passwords - let password manager generate random ones.
Sharing Passwords with Family
1Password Families: Create shared vault, add family members, they get access
Use cases:
- Netflix password with household
- WiFi password with visitors
- Emergency contacts with spouse
Security: Only share with trusted people. Can revoke access anytime.
Common Mistakes to Avoid
1. Weak Master Password
Mistake: Using password123 as master password
Fix: Use 4+ random words or memorable passphrase with 15+ characters
2. Storing Master Password Digitally
Mistake: Saving master password in Notes app or email
Fix: Write on paper, keep secure, memorize, then destroy paper
3. Not Enabling 2FA
Mistake: Relying only on master password
Fix: Enable 2FA immediately after setup
4. Reusing Passwords
Mistake: Still using same password for some accounts
Fix: Let password manager generate unique password for every site
5. Ignoring Breach Alerts
Mistake: Dismissing Watchtower notifications about compromised passwords
Fix: Change compromised passwords immediately when alerted
Frequently Asked Questions
Conclusion
Setting up a password manager is one of the most important security steps you can take. The 30-minute investment protects you from:
- Data breaches
- Identity theft
- Account hacking
- Phishing attacks
- Password reuse vulnerabilities
Next steps:
- Choose password manager (1Password for ease, Bitwarden for budget)
- Create strong master password
- Import existing passwords
- Enable 2FA
- Start using for all new accounts
Within a month, you'll have unique strong passwords for every account and wonder how you ever managed without a password manager.
Need help choosing? Read our complete password manager comparison or email hello@auprivacykit.com