Free Password Manager vs Paid: 2026 Decision Guide
Compare Bitwarden, Proton Pass and NordPass free tiers, check passkey migration, and switch safely in 45 minutes. Real prices included.
You are staring at a renewal notice for a [password manager](/blog/your-password-is-probably-123456-here-s-how-to-fix-it-before-the-next-breach) you have paid for since 2021. The price has crept up again, this time to $59.99 a year, and the feature you actually use is autofill. That is it. You are not running a security operations center. You are a person with 240 logins, half of them for sites you forgot existed.
Switching to a free [password manager](/blog/how-to-protect-yourself-after-a-data-breach-a-step-by-step-privacy-playbook) takes about 45 minutes, and most of that is waiting for exports to process. The hard part is not the software. It is knowing what you give up, whether passkeys survive the move, and how to avoid locking yourself out halfway through. This is the decision guide for that afternoon.
The three names that matter in 2026 are Bitwarden (free tier, open source, the default answer for most people), Proton Pass (free tier, bundled with Proton Mail, strongest for anyone already in that ecosystem), and NordPass (free tier, tied to [NordVPN](https://nordvpn.com/), the pick if you already pay for that VPN). The fourth option is doing nothing, which is legitimate if your current paid manager costs less than the time you would spend migrating.
And before anyone asks: if your real concern is the network layer rather than the vault layer, the [best vpn privacy free](/blog/how-to-use-a-vpn-for-online-gaming-privacy-speed-and-access-explained) tier worth running alongside any password manager is Proton VPN, which keeps unlimited bandwidth on its free plan. A password manager does not hide your traffic. A VPN does not store your credentials. You need both, and both have a free path.
## What you'll need
- A current paid manager you can still log into (1Password, Dashlane, NordPass Premium, Keeper, whatever it is). You need export access before you cancel anything.
- A desktop browser. Do not do this on mobile. CSV exports and imports are miserable on a phone.
- A printed or handwritten recovery kit: your new master password plus any 2FA recovery codes. Paper. Not a screenshot.
- Budget: $0 if you stay free, $10 to $20 a year if you decide the paid tier is worth it after testing.
- Time: 45 minutes for the migration, plus a week of running both managers in parallel before you cancel the old one.
## Step-by-step
### Step 1. Audit what you actually use
Goal: find out whether your paid manager is earning its renewal.
Open your current manager and count three things: how many items are in the vault, how many of those you have opened in the last 90 days, and which premium features you have touched (secure file storage, dark web monitoring, travel mode, emergency access). Most people find they use two features and pay for eleven.
Write the number down. If it is under five features, a free tier will cover you. If you rely on shared vaults for a family or a small team, that changes the math, and you should read the comparison table below before continuing.
### Step 2. Export your vault to CSV
Goal: get your data out in a format every manager can read.
In 1Password, click your account name in the top-left, choose Export, and select CSV. In Dashlane, go to My Account, then Settings, then Export data. In Bitwarden itself, it is Tools, then Export vault. The menu names differ but the path is always under account settings, never under the browser extension.
Watch out: a CSV export is plaintext. Every password you own sits in an unencrypted file on your disk. Do not leave it in your Downloads folder overnight. Do not email it to yourself. Delete it the moment the import finishes, and empty the trash.
### Step 3. Pick your destination and create the account first
Goal: have the new vault ready before you touch the CSV.
Create your Bitwarden, Proton Pass, or NordPass account in a desktop browser, not the extension. Set the master password to something you have never used anywhere else. This is the single point of failure for everything else, so a four-word passphrase beats a clever twelve-character scramble you will forget.
Tip: Bitwarden's free tier gives unlimited passwords and unlimited devices for one user. Proton Pass free gives unlimited passwords, unlimited devices, and unlimited hide-my-email aliases, which is the most generous free alias feature on the market right now. NordPass free is the thinnest of the three: unlimited passwords, but one device at a time.
### Step 4. Import the CSV
Goal: move every item into the new vault without manual retyping.
In Bitwarden, go to Tools, then Import data, choose your old manager from the dropdown so the columns map correctly, and upload the file. Proton Pass uses Settings, then Import, then the same dropdown. NordPass hides it under Settings, then Import items.
Give it a minute. A 400-item vault takes about 20 seconds. When it finishes, spot-check five entries at random, including one with a two-factor code and one with a note field. Column mapping is where imports silently break, and note fields are always the first casualty.
### Step 5. Verify passkey migration before you trust it
Goal: confirm your passkeys survived, because they often do not.
This is the step people skip and regret. Passkeys are not passwords. They are cryptographic key pairs, and most managers store them in a separate vault section from your logins. Export formats have historically handled them inconsistently, and 2026 is better but not perfect.
Open the new manager and look for a Passkeys or Sign-in with passkey section. Count them. Then open your old manager and count there. If the numbers do not match, you have a problem, and the fix is manual: for each missing passkey, go to the site itself (Google, GitHub, [Amazon](https://www.amazon.com/), your bank), remove the old passkey from the site's security settings, and register a new one from the new manager.
Watch out: never delete the passkey from your old manager before you have confirmed the new one works. Register the new one first, test the login, then clean up. Otherwise you are locked out of the account entirely and reduced to account recovery, which for some banks means a phone call and a week.
### Step 6. Run both managers in parallel for a week
Goal: catch anything the import missed while you still have a fallback.
Keep the old manager installed and logged in. Use the new one as your daily driver. When a site autofills from the wrong vault, that is a signal: the entry either did not import or imported with a broken URL match. Fix it in the new manager immediately.
Do not cancel the old subscription during this week. You are paying for insurance, and it is worth the few dollars.
### Step 7. Cancel the old subscription and delete the CSV
Goal: stop the recurring charge and remove the plaintext file.
Cancel in the old provider's web dashboard, not through the app store, if you subscribed on the web. If you subscribed through the Apple App Store or Google Play, you cancel in your phone's subscription settings, and the provider's own cancel button will not stop the billing. This trips up more people than any other step.
Then delete the CSV, empty the trash, and check your Downloads folder one more time.
## Comparison: what you actually get for free
| | Bitwarden Free | Proton Pass Free | NordPass Free |
|---|---|---|---|
| Price | $0 | $0 | $0 |
| Paid tier | $10/yr | $47.88/yr | $35.88/yr |
| Unlimited passwords | Yes | Yes | Yes |
| Unlimited devices | Yes | Yes | No, one device |
| Passkey storage | Yes | Yes | Yes |
| Email aliases | No | Yes, unlimited | No |
| Open source | Yes | Yes, clients | No |
| Best for | Most people | Proton users | NordVPN subscribers |
Prices are US list rates as of October 2026. UK and EU pricing tracks closely, usually within a pound or a euro.
## Common problems and fixes
**The import ran but half the entries are missing.** Your old manager exported a partial vault, usually because a folder or shared vault was excluded. Re-export with everything selected, or export folder by folder.
**Autofill fills the wrong site.** The URL match is too loose. Open the entry in the new manager, edit the website field, and use the exact domain rather than a wildcard.
**Passkeys did not transfer at all.** This is common and not a bug you can fix with settings. Re-register each passkey manually at the site. Budget 3 minutes per account and do the important ones first.
**The browser extension will not unlock.** You are likely on a different browser profile than the one you set up. Open the extension, log out fully, and log back in with the master password rather than a PIN.
**You cannot find the cancel button.** Check whether you subscribed through an app store. If so, the provider cannot cancel it for you.
## What to do next
Once the migration is done, spend 20 minutes on the two things that matter more than which manager you chose. First, turn on [two-factor authentication](/blog/how-to-set-up-two-factor-authentication-on-any-account) for the password manager account itself, using an app rather than SMS. Second, print a recovery kit and put it somewhere a burglar will not find it and a house fire will not reach it.
Then, if you have not already, set up a free VPN tier for the network side. Bitwarden protects your logins. It does nothing about your ISP watching which sites you visit.
## Our take
For most people in the US, UK, and Europe, Bitwarden Free is the answer. It is open source, audited, unlimited on devices, and the paid tier is $10 a year if you ever want the extra features. There is no scenario where paying $60 for a competitor makes sense for a single user.
Pick Proton Pass Free if you already pay for Proton Mail, because the unlimited email aliases are genuinely useful and the bundle logic is sound. Pick NordPass Free only if you already subscribe to NordVPN and want one bill, and accept the one-device limit. If you share passwords with a partner or a team, none of the free tiers do this well, and you should pay for Bitwarden Families at $40 a year rather than pretending a free plan covers it.
## FAQ
**Is a free password manager actually safe?**
Yes, if it is open source and independently audited. Bitwarden and Proton Pass both publish audit results. The encryption is the same on the free and paid tiers. What you pay for is convenience and support, not stronger crypto.
**Will my passkeys work after switching?**
Sometimes. Passkey export support improved through 2026 but remains inconsistent between managers. Plan on re-registering the important ones manually and verify before you cancel anything.
**Do I still need a VPN if I use a password manager?**
They solve different problems. A password manager protects credentials. A VPN hides your traffic from your ISP. The best vpn privacy free tier, Proton VPN, gives unlimited bandwidth at no cost, so there is no reason not to run both.
Frequently asked questions
Is a free password manager actually safe?
Yes, if it is open source and independently audited. Bitwarden and Proton Pass both publish audit results. The encryption is the same on the free and paid tiers. What you pay for is convenience and support, not stronger crypto.
Will my passkeys work after switching?
Sometimes. Passkey export support improved through 2026 but remains inconsistent between managers. Plan on re-registering the important ones manually and verify before you cancel anything.
Do I still need a VPN if I use a password manager?
They solve different problems. A password manager protects credentials. A VPN hides your traffic from your ISP. The best vpn privacy free tier, Proton VPN, gives unlimited bandwidth at no cost, so there is no reason not to run both.
Tech-N-AI Talks
