7 Essential Password Manager features and 6 Bonus features
Not every password manager is created equal. In fact, there are huge differences between password managers. Some are local apps, others cloud-based. Some have mobile apps and browser extensions, some support security keys and passwordless authentication, others may function as authenticator apps or come with additional security that makes them stronger in this regard.
Users may have different requirements when it comes to password managers, but there is an essential list of features that all password managers should support.
The following list provides an overview of these essential features.
1. Reputation of organization or developer
The very first thing to look for is reputation. More precisely, the reputation of the organization or individual behind the password manager. Here, it is important to check the track record but also past issues, such as successful hacks or other security related issues, that may have damaged the reputation.
2. How is the data protected?
Encryption is a book with seven seals for many computer users, but it is still essential. Weak or outdated encryption algorithms may give malicious actors free reign over all stored passwords. Selecting a secure password is just a single aspect of using password managers. A good start is to look for password managers that support modern encryption options. Look for SHA-256, Argon2 and AES support as a start.
3. Multi-factor authentication support
Since the password manager stores all passwords, and maybe also other data, it is essential to protect it well. A unique strong master password is a good start, but support for multi-factor authentication is better. Use an authenticator app or security key to add a second layer of protection.
4. Frequent updates
It is usually a bad sign if a password manager has not been updated for months or even years. Regular updates may include security improvements or fixes, and also new features. It may not be necessary to pick a password manager that gets weekly updates, but if the last update dates back a year or more, it may not be the best option.
There is no definitive answer to this, but the password manager should support all platforms that a user uses. Sometimes, compatible apps or extensions may be available to fill the gap. Most cloud-based password managers support all major desktop and mobile operating systems. Browser extensions may improve the interaction with websites and services open in the browser further. It may not be a must for all, as it is still possible to use copy & paste to fill out login forms.
6. Password Tools
Modern password managers include a number of tools, from password generation tools to create secure passwords whenever the need arises to password leak checks or password management features. A password generator is essential, the other features may be nice to have.
7. Backup and recovery options
Password managers should offer a backup or recovery option for emergencies. A user who forgets their master password may never access the password vault again, unless a backup or recovery option is available. It is essential to make use of this feature, and store the information securely in a safe location.
Bonus: nice to have password manager features
The following features may not be essential for all users, but most users may consider them excellent features that improve the value of a password manager:
- Ability to store data besides passwords, e.g., notes, form data, files, credit card information.
- Security checks, e.g., to highlight weak passwords.
- Form filling support in the password manager's extensions.
- Support for syncing password data across all devices.
- Support for passwordless authentication, or planned support for it.