Password manager

A password manager is software that stores usernames and passwords in a collection called a password vault. The vault is intended to be encrypted, and its encryption key is commonly derived from a master password chosen by the user. Most password managers can generate passwords, save credentials as they are entered, and fill them when the user returns. Some can also synchronize records between devices, share credentials with other users, and store payment-card details, notes, and documents. Password managers are available as standalone applications, browser extensions, features built into web browsers, and services integrated with an operating system. A vault may remain on one device, be synchronized through a provider's servers, or be copied between devices through a separate file-storage service. By generating and storing a different password for each account, a password manager can reduce the need to memorize many passwords or reuse the same password across accounts. Because a single vault may contain credentials for many accounts, the vault and its master password are valuable targets for attack. Security depends on how the vault is protected and on features such as autofill, synchronization, sharing, and account recovery. Users may also avoid or stop using password managers because of concerns about security or control, inconvenience, or compatibility with websites. Password managers have existed since the 1990s. They later became available as browser components, mobile applications, cloud-based services, and features built into an operating system. Some password managers can also create and store passkeys, login credentials based on public-key cryptography that can replace passwords or serve as an additional authentication factor.