How to Manage Passwords on a Windows PC Without Losing Them

One vault, one passphrase, recovery codes on paper: a setup you can still repair in five years.

Password advice collapses the moment it meets reality: dozens of accounts, a browser that offers to save everything, and a PC other people occasionally use. The fix is a small number of decisions made once.

Pick one vault and commit

• A dedicated manager keeps passwords separate from the browser and syncs across devices; the built-in Windows and browser managers are fine if you never leave that ecosystem.
• One long passphrase protects the vault. Four or five random words beat a short string of symbols.
• Length matters more than complexity for the master password, because you type it from memory every day.
• If the vault offers passkeys, use them where supported; they cannot be phished.

Generate, store, never reuse

Let the manager generate 16 to 20 character passwords for everything new, and replace reused passwords starting with mail, banking and anything that stores card details. Reuse is the vulnerability: one breached forum is enough to reach the mailbox that resets every other account.

Survive the loss of your phone and your PC

1. Turn on two-factor authentication with an authenticator app rather than SMS wherever it is offered.
2. Print the recovery codes and the vault's emergency kit, and store that paper with your documents.
3. Test the recovery path once: sign in on a phone from a fresh install, then restore on the PC.
4. Export the vault to an encrypted file quarterly and keep it on a backup drive, not only in a cloud folder.

Harden the machine under the vault

• Sign in with Windows Hello or a PIN while a strong account password sits underneath it.
• Turn on device encryption or BitLocker, so a stolen laptop is a hardware loss only.
• Lock the screen after five minutes.
• Keep a daily account and a separate administrator account for installs and system changes.
• On a shared PC, do not save passwords for mail or banking in the browser at all.

Ten minutes of setup, one printed sheet of paper and a quarterly export turn password management from an annual crisis into a solved problem.