Free vs Paid Password Managers: The Honest Comparison (2026)

The free tier problem in password managers

Most password manager “free tiers” are not really free. They’re trial-bait or deliberately crippled to push upgrades:

• LastPass Free (2021+): Mobile OR desktop — you choose. You get 3 switches per year. This is not a usable free tier.
• Dashlane Free: 25 passwords, 1 device. A product demo, not a product.
• NordPass Free: 1 device. Functionally useless for cross-device users.
• 1Password: No free tier at all — 14-day trial only.

Then there are the three managers where the free tier is genuinely unlimited and designed to be used, not upgraded away from:

The three genuinely free options

1. Bitwarden Free

What you get: Unlimited entries, unlimited devices, browser extensions for every major browser, desktop apps, mobile apps, AES-256 encryption, zero-knowledge architecture, four external audits.

What you don’t get (free vs Premium): File attachments, YubiKey/FIDO2 hardware key support, built-in TOTP authenticator, password health reports, 1GB encrypted storage, emergency access. Premium is £8/year.

Who it’s for: Everyone who needs a capable password manager and doesn’t need the Premium extras. The free tier is not a degraded experience — it’s the same security and the same core UX as Premium, with fewer advanced features.

The honest catch: None for basic use. The only reasons to upgrade to Premium are file attachments, hardware key 2FA, or the built-in TOTP authenticator.

2. KeePassXC

What you get: Open-source, local encrypted database (.kdbx format), browser extension (KeePassXC-Browser), full TOTP support, zero ongoing cost.

What you don’t get: Cloud sync out of the box. You set up sync yourself via Dropbox, Syncthing, iCloud Drive, or any file sync service.

Who it’s for: Technical users who want complete control over their data and are comfortable setting up their own sync. No cloud dependency means no cloud attack surface. Self-hosting with Syncthing + KeePassXC is the most privacy-preserving setup at zero cost.

The honest cost: The friction tax is real. Setup takes 45-90 minutes if you’ve done it before, longer if you haven’t. You are responsible for backups. When you forget to sync, you’re out of date on some device. This is a technical user’s tool.

3. Apple Passwords (iOS 18+)

What you get: Unlimited entries, all Apple devices, iCloud sync, Touch ID/Face ID, passkey support, Safari autofill, basic 2FA.

What you don’t get: Windows support beyond a Chrome extension that breaks periodically; TOTP seed import from other managers; folder/vault structure; emergency access; browser extension for Firefox or Edge; Android support.

Who it’s for: All-Apple households where every member uses Mac, iPhone, and/or iPad. If you never touch Windows or Android and don’t need family vault sharing with granular permissions, Apple Passwords does 90% of what a paid manager does for £0.

The honest catch: The moment someone in the household gets a Windows machine or an Android phone, Apple Passwords’s limitations become painful. Cross-platform is where the free Apple offering fails.

When is a paid manager worth the money?

The price range for paid password managers is £8/year (Bitwarden Premium) to £39/year (Dashlane Personal). Here are the specific cases where paying makes sense:

Case 1: You’re migrating from LastPass with 50+ TOTP seeds. Pay for 1Password (£29/year). It’s the only manager with a 5/5 migration fidelity score from LastPass — it preserves every TOTP seed, folder, and attachment. The alternative is spending 2-3 hours manually re-enrolling TOTP at every service. One hour of your time at any professional rate is worth more than £29.

Case 2: You’re setting up a family and want emergency access + shared vaults. Pay for 1Password Families (£47/year, 5 users) or Bitwarden Families (£30/year, 6 users). The family plans include genuine vault-sharing with granular permissions and emergency access — features missing from every free tier.

Case 3: You need hardware key 2FA. Bitwarden Premium (£8/year) is the only free-tier manager that can be upgraded to support YubiKey and FIDO2 hardware keys for account security. At £8/year, this is the cheapest way to get hardware-key-secured password management.

Case 4: You want all-in-one security (password manager + VPN + dark web monitoring). Pay for Dashlane Personal (£39/year). This only makes sense if you’d otherwise pay separately for a VPN and dark web monitoring — which would cost more.

Case 5: You’re running a team of 5-10 people. Pay for 1Password Teams Starter ($19.95/month flat for up to 10 users). This is the best-value team plan at that headcount — cheaper than Bitwarden Teams ($40/month for 10) and includes admin console, activity logging, and shared vault management.

The decision tree

Starting from zero?
  └─ Yes → Bitwarden Free (unless you're 100% Apple → Apple Passwords)
  └─ No, migrating from LastPass →
       Have 50+ TOTP seeds?
         └─ Yes → 1Password (£29/yr) — only 5/5 migration target
         └─ No → Bitwarden Free (manage the 1-2 hrs of TOTP re-enrolment)

Setting up for a family?
  └─ 5 people → 1Password Families (£47/yr) or Bitwarden Families (£30/yr)
  └─ 6-10 people → Bitwarden Families (£30/yr, 6u) or Dashlane Friends & Family (£59/yr, 10u)

Running a team?
  └─ 5-10 people → 1Password Teams Starter ($19.95/mo flat)
  └─ 11+ people → Bitwarden Teams ($4/user/mo)

What you’re paying for vs what’s free

The bottom line

If you’re starting fresh and don’t have specific requirements: Bitwarden Free. It has everything you need, costs nothing, and there’s no pressure to upgrade. The free tier is not a marketing tease — it’s the full product minus a handful of advanced features most users don’t need.

If you’re leaving LastPass with TOTP seeds: 1Password (£29/year). Pay for the migration fidelity.

If you’re a family: 1Password Families or Bitwarden Families. Pick based on whether you have 5 or 6+ members, and whether UX polish for non-technical members justifies the extra £17/year.

If you want everything in one app: Dashlane (£39/year). Only worth it if you’d otherwise pay for a separate VPN.