![](/static/66c60d9f/assets/icons/icon-96x96.png)
![](https://lemmy.world/pictrs/image/ca9b0de3-205f-47ca-a620-5fbddb680695.png)
Yes, 100%… In fact, I often do recommend it to others. Personally I use Bitwarden (paid account even) but I’ve also recommended 1pass to apple only users because it fits well in that ecosystem.
You can use them to generate a different password for each and every login. And it’s really just random letters, number and special characters. That one site gets compromised? They can’t then use those credentials to login anywhere else.
You don’t have to remember those passwords. Passwords that are easy to remember are probably found in dictionary attacks. You know what’s not? $a@Nzeq7*8UwSJ7sTsMKdC!HSGZZ7JnzCtxhfCfFCiXP&FD!yM!c^$DisSR@2
(which I just generated with bitwarden)
2-factor auth is also really easy with most password managers and makes logging in with 2-factor auth easy. I hit one hotkey to fill in the web form with my username/password, hit enter to login and then it auto-copies my TOTP code so I can just paste it and go. Super secure but super easy.
You go to a phishing site? Guess what, a good password manager will store the url and if it doesn’t match, that should be your first red flag. If I end up at g00gle.com instead of google.com, it won’t show as having a login available.
Bitwarden has a free tier but then you can pay for additional things like 2FA.
Though I believe you could also self-host and get the additional features without paying Bitwarden.