Recommended password workflow
A practical end-to-end flow: set up a password manager once, generate secrets with Passwizard, store them safely, and stay ahead of leaks. This page is a map—not a substitute for your chosen password manager or its documentation.
1 · One-time setup
Do this once before you rely on generated passwords everywhere.
- Choose a password managerPick a reputable manager (cloud or offline) that fits your threat model. You will store every site password here—not in spreadsheets, notes, or browser-only memory.
- Create a strong master passwordThis is the one passphrase you memorize. It unlocks everything else. Make it long and unique; it is not the same as passwords for individual websites.
- Enable 2FA where it mattersTurn on two-factor authentication for your email, your password-manager account, and other high-value logins. See the 2FA guide for how to pick a method.
2 · New account or new password
Every time you sign up or rotate a password, follow the same sequence:
The schematic summarizes each step in short labels. The bullet points in section 1 and 3 spell out the same ideas with full context.
- Generate a strong password on passwizard.net (match the site’s length and character rules).
- Immediately save a record in your password manager: site name, URL, username, and the generated password.
- Register or sign in on the target site using the password from your manager (autofill or paste).
- Enable 2FA on that site if offered—especially for email, banking, and identity providers.
- Use “sign out everywhere” or revoke sessions on that site if you rotated an existing password.
3 · Ongoing hygiene
Security is a habit, not a one-off.
- Do not reuse passwords across sites; let the manager create and fill unique secrets per account.
- Change passwords when you suspect compromise or after a confirmed breach—not on an arbitrary schedule.
- Occasionally check whether your credentials appear in known leaks (see our Password Leaks page).
- Keep devices updated and lock your screen when you step away so your vault stays protected.
How Passwizard fits in
Passwizard generates cryptographically strong random passwords in your browser. It does not replace a password manager: use the generator for entropy, then the manager to store, sync, and autofill. For Wi‑Fi credentials you share in a physical space, use the WiFi QR tool—still unique secrets, managed wherever you control network access.
Complete your security setup
Combine these free tools for end-to-end protection. Everything runs locally or with strict privacy guarantees.
Create strong, unique passwords locally in your browser — Web Crypto API, no tracking.
Open generatorPassword Leak CheckCheck passwords against Have I Been Pwned with k-anonymity — only the first 5 SHA-1 chars are sent.
Check leaks2FA GuideProtect your accounts with two-factor authentication — TOTP, push, and hardware keys compared.
Learn 2FA