Stop Using Your Dog's Name as a Password

Richard Gallagher had a system. His password was "Buddy2019" — named after his golden retriever and the year he got him. It was easy to remember, easy to type, and he used it for everything: his Gmail account, his Amazon account, his bank, his Medicare portal, and about forty other websites he'd signed up for over the years.

It worked great for five years. Then, in February 2026, a discount pet supply website he'd ordered from once in 2021 got hacked. The hackers didn't care about his order for dog treats. They cared about the email address and password stored in that site's database: [email protected] and Buddy2019.

Within three hours, they'd logged into his Gmail (same password), found a bank statement email, logged into his bank (same password), and transferred $2,300 to an overseas account. By the time Richard noticed the withdrawal notification on his phone, the money was gone. His bank eventually recovered most of it — after six weeks of paperwork, phone calls, and stress that kept him up at night.

Richard's story isn't unusual. It's the norm.

What Is a Password Manager?

A password manager is a digital lockbox for all your passwords. Instead of remembering dozens of passwords (or, more realistically, using the same one everywhere), you remember one single password — called your master password — and the password manager remembers everything else.

Here's how it works in plain English: when you visit a website and need to log in, the password manager automatically fills in your username and password. When you sign up for a new account, it generates a random, uncrackable password like x7$mK9!pLw2@qR4v and saves it for you. You never need to see, type, or remember that password. The manager handles it.

Think of it like a safe deposit box at the bank. You have one key (your master password) that opens the box. Inside the box are hundreds of individual keys (your website passwords), each one unique and virtually impossible to duplicate. If someone steals one of those individual keys, they only get into one account — not all of them.

The best part? Password managers work across all your devices. Save a password on your computer, and it's available on your phone and tablet too. No sticky notes. No notebooks in desk drawers. No calling your daughter to ask "what was my Netflix password again?"

Best Options for Seniors

Not all password managers are created equal. After testing the major options, here are the three best choices for people who want strong security without a steep learning curve:

1Password ($3/month) — Best Overall

1Password is the gold standard. The interface is clean and intuitive, the browser extension works flawlessly, and the customer support is excellent. It works on Mac, Windows, iPhone, Android, and every major web browser. The "Watchtower" feature alerts you if any of your passwords have appeared in a known data breach, so you can change them immediately.

The downside: it costs $2.99 per month (billed annually at $35.88). There's no free tier. But for the polish, reliability, and peace of mind, it's worth every penny. If you can afford a streaming service, you can afford 1Password.

Bitwarden (Free) — Best Free Option

Bitwarden gives you 90% of what 1Password offers for exactly zero dollars. It's open source, meaning its code is publicly audited by security researchers — nothing hidden, nothing shady. The free plan includes unlimited passwords, unlimited devices, and a solid browser extension. The paid plan ($10/year) adds a few extras like built-in two-factor authentication, but the free version is genuinely excellent.

The downside: the interface isn't quite as polished as 1Password, and the setup process requires a few more steps. But functionally, it's rock-solid and trusted by millions of users worldwide.

Apple Keychain (Free) — Simplest for Apple Users

If you use an iPhone, iPad, and Mac, Apple's built-in Keychain (now called "Passwords" in iOS 18) is the easiest option. It's already on your devices. It automatically suggests strong passwords, saves them, and fills them in when you need them. Zero setup required — it just works.

The downside: it only works well within the Apple ecosystem. If you have a Windows computer or an Android phone, Keychain becomes clunky. It also lacks some advanced features like password sharing with family members and detailed breach monitoring. But if you're all-Apple, all the time, this is the path of least resistance.

Your Master Password Strategy

Your master password is the one password that protects all the others. It needs to be strong — but it also needs to be something you can actually remember. The solution? Use a passphrase instead of a password.

A passphrase is a string of random words strung together. For example:

purple-elephant-dancing-rain-42

This passphrase is 31 characters long. A hacker's computer trying every possible combination would need roughly 500 years to crack it. Meanwhile, you can picture a purple elephant dancing in the rain and remember it instantly. That's the magic of passphrases — they're easy for humans and hard for computers.

Here are a few more examples:

• coffee-blanket-mountain-seven-red
• garden-trumpet-silver-ocean-15
• breakfast-window-flying-turtle-88

Pick four or five random words, add a number, and connect them with dashes. Don't use words that relate to your life (no pet names, no birthdays, no street addresses). The more random, the better. You can even use Bitwarden's built-in passphrase generator to create one for you.

What If I Forget My Master Password?

This is the number-one fear people have about password managers, and it's a valid concern. If you forget your master password, you can't get into your vault. That's by design — it's what makes the system secure. Even Bitwarden and 1Password can't recover it for you.

But there's a simple, low-tech solution that works perfectly:

Write your master passphrase on a piece of paper. Put that paper in a sealed envelope. Write "Password Recovery" on the outside. Store that envelope in a fireproof safe at home, or in a safety deposit box at your bank.

Then, tell one trusted family member where the envelope is. Don't tell them the password — just tell them where to find it if something happens to you. This way, if you're ever incapacitated or pass away, your family can access your accounts without spending months fighting with customer support departments.

Some people keep two copies: one at home in a fireproof safe, and one in a safety deposit box. That's not overkill — that's smart planning. Think of it as insurance for your digital life.

One more tip: after you've used your passphrase for a week or two of daily logins, the muscle memory will kick in. You'll type it without thinking, the same way you type your phone's PIN code today. The paper backup is there for emergencies, not for daily use.

The Bottom Line

Richard uses Bitwarden now. His daughter helped him set it up one Sunday afternoon — the whole process took about 20 minutes. Over the following week, Bitwarden saved passwords for 47 different websites as Richard went about his normal browsing. Each one now has a unique, randomly generated password that no human or computer could guess.

His master passphrase is written on a card inside a sealed envelope in his fireproof safe. His daughter knows where the envelope is, just in case. He hasn't had to remember a single password since the day he set it up.

"I spent five years using the same password everywhere because I thought it was easier," Richard says. "Setting up Bitwarden was easier than ordering something on Amazon. My only regret is not doing it sooner."

You don't need to be a tech expert. You don't need to spend any money. You just need 20 minutes and a willingness to stop using your dog's name as a password. Your future self — and your bank account — will thank you.