Twenty minutes once, and you stop memorising passwords for good.

Your master password

This is the only password you will still have to remember, so make it long rather than complicated. Four unrelated words beat a short string of symbols — easy for you, extremely hard to guess. Never reuse it anywhere else.

Import what the browser already holds

The password manager can import everything the browser has saved, so you do not start from an empty list.

Then clear the browser — this step is not optional

After the import, go to your browser password settings, delete the saved passwords and turn off the offer to save them in future. Importing without clearing leaves both copies in place, and the vulnerable copy is the one attackers reach.

In Chrome and Edge this lives under Settings, in the passwords or autofill section. If you are unsure, we will do it with you over a call — it takes two minutes.

Backup codes and recovery

Store the recovery kit the way we described in the two-factor course: printed and locked away, or inside the company vault. Not in email, not in a note on the phone.