Cyber for Normies

Accounts and passwords

Are browser password managers safe? Built-in vs. standalone apps

The short answer

Yes, on your own devices. The UK’s NCSC says saving passwords in your browser or phone is safe there, and is the easiest option if you stick with one brand of devices (NCSC).

Don’t save passwords on shared or public computers, and keep your browser’s automatic updates on (NCSC).

The built-in options

  • Apple Passwords on iPhone, iPad, and Mac. It makes strong passwords, warns about reused or leaked ones, and syncs with iCloud Keychain (Apple).
  • Google Password Manager in Chrome and Android. It saves passwords to your Google Account to use across devices, and checks them for problems (Google, Google).
  • Microsoft Edge and other major browsers also offer to create and save passwords (NCSC).

Side by side

Built into browser or phoneStandalone app (1Password, Bitwarden, others)
CostFree (CISA)Some free, some paid (CISA, NCSC)
SetupUsually already on, and the easiest choice (NCSC)Install an app and create an account (NCSC)
Mixed devicesBest when you use the same brand everywhere (NCSC)Syncs across a mix of browsers and devices (NCSC)
Protected byYour device and your Apple or Google account (NCSC)Its own main password, plus two-step login (NCSC)

How to make a built-in one safer

  1. Lock your phone and computer with a passcode, face, or fingerprint. Browser passwords are only as secure as your devices and accounts (NCSC).
  2. Turn on 2FA for your Apple or Google account, since that account protects your saved passwords. See how to turn on two-factor authentication.
  3. Leave automatic updates on for your browser and operating system (NCSC).
  4. Never save passwords on a shared or public computer, like at a library (NCSC).

When a standalone app makes more sense

  • You use an iPhone with a Windows computer, or switch between browsers (NCSC).
  • You want extras like easy sharing with family, or more control over the passwords it makes (NCSC).

Either way, the big win is the same: a different password for every account (CISA). Ready to switch? See how to set up a password manager.

Common questions

Is it safe to let Chrome save my passwords?

On your own devices, yes. NCSC says browser saving is safe there, as long as you keep updates on and don’t save on shared computers (NCSC).

Is Apple Passwords a real password manager?

Yes. Apple says it creates strong passwords, stores passwords and passkeys, and alerts you to weak, reused, or leaked passwords (Apple).

Is 1Password or Bitwarden better than Google or Apple?

Not automatically. NCSC says the best one is whichever meets your needs and you find easiest to use (NCSC).

This page is general information, not legal or financial advice. If money already left your account, call your bank or card company first.

Get one plain-English scam warning every Tuesday

Cyber for Normies is a free weekly email for people who don’t work in tech. Short, calm, and easy to forward to the people you look out for.

Join free and get 7 Ways to Spot an Internet Scam, a cheat sheet worth keeping by the phone.
Free. One email every Tuesday. Unsubscribe anytime. Privacy

Sources

  1. Password managers: how they help you secure passwords (NCSC (UK))
  2. Use the Passwords app to create, manage, and share passwords and passkeys across Apple devices (Apple)
  3. Manage passwords in Chrome (Google)
  4. Google Password Manager (Google)
  5. Use Strong Passwords (CISA)