Review: The Password Manager Has Become a Landlord for Your Memory

The object under review

It has been a long time since you typed a password. You clicked a field, a small rectangle autocompleted, and the machine performed what looked like magic and was actually bookkeeping. The password manager is the least glamorous piece of software you pay for, and after six months of running two competing vaults side by side, I am convinced that is the point. Nobody wants a charisma campaign from their key ring.

Fact. Both products encrypt the vault locally with a key derived from a master password or a biometric unlock; the vendor cannot read the contents. Both autofill into browsers and phone apps, both store passkeys alongside passwords, both sell individual and family subscriptions, and both warn you when a stored credential appears in a known breach corpus. The family tier, typically a handful of dollars a month, adds shared vaults, role-based permissions, and emergency access for the person who inherits your accounts.

Fact. The free tiers restrict you by device count rather than by features. This is a deliberate shape: the first restriction you hit is the one that teaches you to pay.

Autofill is where the power sits

Interpretation. Storage was never the difficult part; a file on disk would do that. The interesting behavior is the decision the manager makes every time you land on a login page: is this the site you meant? The vault has become a gatekeeper with a clipboard. Its domain-matching logic now stands between you and every credential you own, which means the security pitch has quietly migrated from we encrypt your secrets to we will not hand them to a convincing stranger.

Run the experiment on yourself. You will find the manager knows your bank, your landlord, your ex's streaming login, and the forum account you stopped visiting in 2019 but never closed. A tool that answers that many questions about your life is not a jar. It is infrastructure with an opinion about where you are allowed to go.

Fact. Phishing resistance depends entirely on how strictly the matcher binds credentials to origins. Loose matching fills on lookalike domains. Strict matching occasionally refuses to fill on the legitimate site and offers to add an exception, which most people will click through without reading.

The breach alert is a weather report

Fact. When a stored password surfaces in a public breach collection, the manager flags it, ranks it by reuse, and points you at a change-password flow. The alert is retrospective by construction: it reports on events that already happened to databases you do not control.

Interpretation. This is the product admitting what it cannot do. It cannot stop the leak, cannot negotiate on your behalf, and cannot tell you whether the account was actually opened by anyone. What it sells in that moment is triage: a ranked list of small errands. The manager has become the rare piece of software that treats your attention as the scarce resource and your memory as the thing worth renting back to you.

What the subscription is really leasing

Fact. Export exists. Both products can hand your data back as an encrypted archive or a plain file, and plain files open anywhere. Nothing technical prevents you from leaving.

Interpretation. The switching cost is behavioral rather than technical. Autofill habits, shared family vaults, attached browsers, emergency-access contacts, and years of corrected entries accumulate into something that resists movement the way a lease does. The family plan, marketed as convenience, functions as an estate document: whoever administers it decides who inherits which door. That is a governance role disguised as a settings page, and it arrives without a manual.

Passkeys are shrinking the jar

Fact. Passkeys are cryptographic key pairs, and the private half never leaves the device or synced enclave in a form a remote server can use. Increasingly, operating system keychains can create and use them without any third-party manager involved, while managers respond by offering to store and sync them as the cross-platform alternative.

Prediction. The job shifts from storing strings to brokering approvals and recoveries. Value concentrates in synchronization across hostile ecosystems and in what happens when you lose every device you own on the same afternoon. A product whose entire pitch is a vault of secrets has a shrinking lease; a product whose pitch is continuity of identity across platforms does not. Expect the interface to grow quieter and the recovery flow to become the actual product.

Verdict

Interpretation. The password manager remains one of the few subscriptions I would defend on principle rather than habit, which is not the same as defending every vendor in the category. It has outgrown its own name: it does not remember passwords so much as govern access to them, and it performs that job with an earnestness that borders on civic duty. The caveat is structural. You are no longer keeping secrets in a strongbox; you are renting floor space in someone else's building, and buildings change hands. Choose like a tenant, not a fan, and for the love of the record, write the master password down somewhere a plumber could find it.