Password manager or browser? What the difference means

What the password storage of Chrome and Apple's Passwords app can do, what the BSI warns about browsers, and when a separate password manager is worth it.

Key points

Browsers can save passwords too. That is better than reusing one password everywhere.
The BSI warns that browsers are complex programs that do not treat password storage as a top priority, so malware can extract saved logins fairly easily.
A separate password manager works across browsers and systems and keeps its vault behind its own main password.

What browsers offer

Chrome, Firefox, Safari, and Edge offer to save a password whenever you sign in. Two examples:

Google Password Manager in Chrome and on Android syncs your passwords through your Google account. With the optional on-device encryption, the key stays with you instead of in your Google account, and according to Google “only you can see your data.” Google does not switch it on by itself yet, and once set up it cannot be removed.
Apple’s Passwords app keeps “passwords, passkeys, and verification codes” in one place across your Apple devices.

For many people, this is a big step up from reusing one password. It is still not the same as a separate password manager.

What the BSI says

Germany’s Federal Office for Information Security (BSI) calls browser storage easy to use. But because browsers are complex programs that do not treat this topic with top priority, it says, malware can extract the saved logins fairly easily. It recommends password managers in general, and a second factor for especially sensitive accounts such as your email.

The difference

	Browser	Separate password manager
Works in	mostly its own browser or its maker’s devices	all common browsers and systems
Locked by	your device or your Google or Apple account	its own main password
Shares with family	depends on the browser	built in at most makers, often in a family plan
Extras	passkeys and, at Apple, verification codes	passkeys, 2FA codes, secure notes, and reports on weak or leaked passwords, depending on the plan

When a separate password manager is worth it

If you use one browser on devices from one maker, its password storage is still much better than reused passwords. Secure it with a screen lock on every device and two-factor sign-in for your Google or Apple account. A separate password manager is worth it if you switch between browsers or systems, share passwords with family, or want one place for passwords, passkeys, and notes.

What you can do

If you stay with Chrome, turn on on-device encryption under passwords.google.com › Settings.
Lock every device with a PIN, a password, or biometrics.
Turn on two-factor sign-in for your Google or Apple account.
If you switch to a password manager, move your passwords over and then turn off saving in the browser, so they are not kept in two places.

Next step

The guide Move your passwords from your browser shows how to move them safely.

The figures in this guide come from the archive and change with every data update. As of November 13, 2026.

Password manager or browser? What the difference means for you