Passwords are the part of computing where the boring advice is also the correct advice: unique password for every account, generated by something other than your memory, stored somewhere that isn't a notes file. The argument is over where.
On iPhone you have an unusual amount of good options, because Apple built a competent one into the system and lets competitors plug into the same filling mechanism. That last part is the important bit, and it's the thing most people get wrong: iOS allows only one password manager to fill credentials automatically. You can install four, but AutoFill follows one.
Four apps cover the honest range. Apple's own, an open-source option that costs nothing, the polished subscription everyone's heard of, and a privacy-first one with a twist. One is free with your device, one is free and open source with a paid tier, two are freemium subscriptions. Prices loosely, as always — the question is whether the thing you're paying for is one you can verify.
iCloud Passwords: free, already installed
iCloud Passwords — the Passwords app in recent iOS versions, formerly buried in Settings — is the default answer for most people, and it's a better answer than its reputation suggests. It generates strong passwords, stores them in your iCloud Keychain encrypted end to end, warns you about reused and leaked credentials, and supports passkeys properly.
The integration is the selling point: it fills in Safari and in apps, syncs across your Apple devices, and shares passwords with a family group if you set one up.
The trade-offs are real. It's Apple-only in practice — there's a Windows app and a Chrome extension, but the experience outside Apple's ecosystem is thin. Organizing a few hundred credentials is clumsy, there's no real tagging or folder structure, and sharing with someone outside your family group means handing over the password itself. If you use a Windows PC and an Android tablet, this is not your manager.
Bitwarden: open source, honest pricing
Bitwarden is the recommendation for anyone who wants to be able to check the code. It's open source, independently audited, and free for unlimited passwords on unlimited devices — a genuinely unusual offer that isn't a trial.
It does everything the paid options do at a basic level: strong generator, TOTP codes for two-factor logins, secure notes, sharing through organizations, and clients on every platform you can name. The paid tier adds things like emergency access and file attachments, but the free version isn't crippled.
The trade-offs are interface and polish. Bitwarden is functional rather than elegant; the iOS app works fine but feels like a tool rather than a product. Setup is more involved than Apple's — you'll create a master password and actually need to remember it.
1Password: the polished subscription
1Password is what people mean when they say a password manager can be pleasant. The iOS app is fast, the filling is reliable, and the design has had years of attention. Watchtower flags weak, reused, and breached credentials, travel mode lets you hide vaults when crossing borders, and the sharing model for families and teams is the best in the category.
It also handles the awkward cases well: separate vaults for work and personal, and passkeys alongside passwords rather than as an afterthought.
The trade-offs start with the price and the pattern. There's no free tier beyond a trial — it's a subscription, and the subscription is the product. It's closed source, so you're trusting the company's audits and reputation rather than reading the code. And 1Password's architecture puts your vault in their cloud by default; that's well designed and encrypted, but it's still someone else's server.
Proton Pass: passwords plus aliases
Proton Pass comes from the company behind Proton Mail, and it inherits that company's positioning: end-to-end encryption, Swiss jurisdiction, and a strong free tier. The differentiating feature is email aliases — generate a throwaway address for a signup, and mail to it forwards to your real inbox. When a site leaks or sells your address, you turn the alias off.
That combination is genuinely useful for anyone trying to reduce the footprint of their inbox, and it's the sort of feature that changes behavior rather than just adding a checkbox. Free tier, subscription for unlimited aliases and the advanced sharing.
The trade-offs: it's the newest of the four, so integrations are thinner and the iOS filling is slightly less seamless. And the alias feature only pays off if you're willing to move more of your life into Proton's world.
AutoFill: the setting that decides everything
Whichever you pick, this is how you make it work: open Settings, go to Passwords (or General, then AutoFill & Passwords on older versions), tap Password Options, and choose your manager under AutoFill Passwords. Turning one on turns the others off — that's iOS by design, not a bug.
That single setting explains most complaints about password managers on iPhone. Someone installs Bitwarden, never flips the switch, and concludes it doesn't work.
Which one fits
- Apple-only, zero setup: iCloud Passwords.
- Free, open source, cross-platform: Bitwarden.
- Best experience, willing to pay: 1Password.
- Aliases and mail privacy: Proton Pass.
No comments yet