Day 1: master password and recovery kit
Do this first because it is the only step you cannot undo later. Bitwarden requires master passwords created after release 2023.3.0 to be at least 12 characters, and says it cannot retrieve or reset a forgotten one. 1Password asks you to save an Emergency Kit containing your sign-in address, email, Secret Key and a space to write your account password; if you missed it, sign in at 1Password.com, select your name, Manage Account, then Save Emergency Kit. NordPass asks for a Master Password that is different from your Nord Account password and recommends generating a Recovery Code, which you can download as a PDF.
Practical routine: print the 1Password Emergency Kit or the NordPass Recovery Code and store it with documents like your passport, which is where 1Password suggests keeping its kit. Bitwarden has no recovery kit, so its equivalent safety net is emergency access (day 7) plus the two-step login recovery code you will save on day 4.
Day 2: install the apps and the browser extension
Install the desktop app, the phone app and the extension for every browser you actually use. Bitwarden lists extensions for Chrome, Firefox, Safari, Edge, Opera, Brave, Vivaldi, DuckDuckGo and Tor. 1Password lists Chrome 140, Firefox 140, Edge 140, Brave 1.82.0 and Safari 18.6 on macOS Ventura 13 or later as minimum extension versions. In NordPass you can open the app, go to Settings, Autofill and Autosave, and select Add NordPass browser extension; the Safari extension comes from the Mac App Store and must then be ticked in Safari Settings, Extensions, and allowed on every website.
Check your plan before installing everywhere. NordPass says its Free plan allows one active session on one device, while Premium stays logged in on unlimited devices. If you are on NordPass Free, decide which device matters most before day 3.
NordPass on Chrome: if your extension is named NordPass (legacy), NordPass says it stops working on January 1, 2027, so install the current NordPass Password Manager and Digital Vault extension instead.
Day 3: import or capture your top 20 logins
If your passwords are in a browser or another manager, import them. Bitwarden imports from the web app under Tools, Import, and also from the extension and desktop app; it does not check for duplicates, so import each file once. 1Password imports from Chrome, Firefox, Edge, Brave and Safari as well as several password managers. NordPass imports from Settings, Import and export, Import items. Delete the export file afterwards; Bitwarden and NordPass both say this.
If you are starting from nothing, do not try to capture everything. Write down the 20 logins you use most: email, phone carrier, bank, card issuers, work tools, shopping, streaming. Sign in to each one with the extension active and save the login when prompted. The rest will be captured naturally over the next month.
Day 4: turn on two-step login for the vault account
Bitwarden: web app, Settings, Security, Two-step login. Authenticator app, email and FIDO2 WebAuthn keys are free; Duo and YubiKey OTP need Premium. When you enable any method Bitwarden issues a recovery code, viewable from the same page; save it with your Day 1 papers, because it disables two-step login if you lose your phone.
1Password: sign in at 1Password.com, select your name, Manage Account, More Actions, Manage Two-Factor Authentication, then Set Up App. 1Password advises keeping these codes in a separate authenticator app, not inside 1Password, and suggests writing the 16-character secret next to the QR code on a printed Emergency Kit. Security keys such as YubiKey or Titan are also supported.
NordPass: in the app or Web Vault open Settings, scroll to Security and enable Multi-factor Authentication, then choose Manage MFA in your Nord Account and set up an authenticator app or a security key. Save the backup codes. Note that this MFA applies to the whole Nord Account, including NordVPN and NordLocker if you use them.
Day 5: fix reused and exposed passwords
Open the health report: Reports in the Bitwarden web app, Watchtower in the 1Password sidebar, Password Health in NordPass (under Tools on mobile). Bitwarden notes that most of its reports require Premium, but the Data Breach report is free; its Reused and Weak reports run locally, and the Exposed Passwords report sends only the first five characters of a password hash. NordPass lists Password Health as a Premium feature.
Do not try to fix everything in one sitting. Change passwords in this order: email accounts first (they reset everything else), then banking and payment, then anything flagged as exposed, then reused passwords on accounts that store a card. NordPass has a Change Password button that opens the site; in every manager, use the built-in generator and save the new password before you leave the page.
Day 6: turn off the browser built-in password saving
Two managers offering to save the same password is the most common cause of confusion. Bitwarden gives the paths: in Chrome open chrome://password-manager/settings and turn off Offer to save passwords and passkeys and Sign in automatically; in Edge open edge://wallet/settings, choose Microsoft Password Manager and turn off Ask to save password and Autofill passwords and passkeys; in Firefox clear the boxes under Passwords and autofill; in Safari clear the options on the AutoFill tab. The Bitwarden extension can also set itself as default via Settings, Autofill, Make Bitwarden your default password manager. NordPass says its extension typically disables the Chrome setting once installed, but check.
Leave the old browser passwords in place for now. Delete them only after a week of the new manager filling correctly, so you still have a fallback.
Day 7: emergency access and sharing
Bitwarden: emergency access is a Premium feature (included with paid organizations), but your trusted contact can use a free account. You choose view or takeover access, and any request is bound by a wait time you set. NordPass: Premium or Family users open Settings, Other, Emergency access, Give Access, and enter the email of another NordPass user; you have 7 days to accept or decline a request before it is granted automatically, and the feature is available on desktop, Android and Web Vault. 1Password: the pages we reviewed do not describe a separate emergency access feature; its route is a family organizer who can recover your account, plus a copy of your Emergency Kit given to someone you trust.
Printable first-week checklist
| Day | Task | Bitwarden | 1Password | NordPass | Done when |
|---|---|---|---|---|---|
| 1 | Master password and recovery | 12+ characters; no recovery kit | Save and print Emergency Kit | Save and print Recovery Code | Paper copy stored offline |
| 2 | Apps and extensions | Download page lists 9 browsers | Check extension minimum versions | Settings, Autofill and Autosave; Free plan is one active device | Extension unlocks on every browser you use |
| 3 | Import or add 20 logins | Tools, Import; no duplicate check | Import from browsers or managers | Settings, Import and export, Import items | Top 20 sites fill from the vault; export file deleted |
| 4 | Two-step login on the vault | Settings, Security, Two-step login; save recovery code | Manage Account, More Actions, Manage Two-Factor Authentication | Settings, Security, MFA, then Manage MFA | Backup or recovery code stored with Day 1 papers |
| 5 | Fix weak and reused passwords | Reports (mostly Premium) | Watchtower | Password Health (Premium) | Email and banking passwords unique |
| 6 | Turn off browser saving | Make Bitwarden your default password manager | Browser settings | Usually automatic in Chrome; verify | Only one save prompt appears |
| 7 | Emergency access | Premium; contact can be free | Family organizer or shared Emergency Kit | Premium or Family; 7-day auto-grant | Trusted person has accepted |
Questions before you decide
Do I need to import everything on day one?
No. Importing a browser export is quick, but if you are starting from scratch it is better to add your 20 most-used logins on day 3 and let the extension capture the rest as you sign in over the following weeks.
Should my vault two-factor codes live inside the password manager?
Not for the vault account itself. 1Password advises keeping its own sign-in codes in a separate authenticator app, and Bitwarden and NordPass both give you recovery or backup codes to store outside the vault.
Why does Chrome still offer to save passwords after I installed the extension?
The Chrome built-in manager is still switched on. Turn off Offer to save passwords and passkeys and Sign in automatically at chrome://password-manager/settings, as Bitwarden documents.
Can I use NordPass Free on my laptop and phone?
You can install it on both, but NordPass says the Free plan allows only one active session on one device at a time. Premium removes that limit.
Sources & verification
Product details and prices can change. Check the linked provider before buying.
- Bitwarden: your master password Accessed 30 Oct 2026
- Bitwarden: import data to your vault Accessed 30 Oct 2026
- Bitwarden: two-step login methods Accessed 30 Oct 2026
- Bitwarden: recovery code for two-step login Accessed 30 Oct 2026
- Bitwarden: vault health reports Accessed 30 Oct 2026
- Bitwarden: disable a browser built-in password manager Accessed 30 Oct 2026
- Bitwarden: emergency access Accessed 30 Oct 2026
- Bitwarden: download apps Accessed 30 Oct 2026
- 1Password: get to know your Emergency Kit Accessed 30 Oct 2026
- 1Password: use two-factor authentication Accessed 30 Oct 2026
- 1Password: Watchtower Accessed 30 Oct 2026
- 1Password: import data into 1Password Accessed 30 Oct 2026
- 1Password: system requirements Accessed 30 Oct 2026
- 1Password: if you forgot your account password Accessed 30 Oct 2026
- NordPass: how to set up the Master Password Accessed 30 Oct 2026
- NordPass: set up the NordPass extension on desktop Accessed 30 Oct 2026
- NordPass: Premium vs Free version Accessed 30 Oct 2026
- NordPass: how to import passwords to NordPass Accessed 30 Oct 2026
- NordPass: how to enable multi-factor authentication Accessed 30 Oct 2026
- NordPass: how to use Password Health Accessed 30 Oct 2026
- NordPass: disable the Chrome password manager on desktop Accessed 30 Oct 2026
- NordPass: how to give Emergency Access Accessed 30 Oct 2026
- NordPass: legacy Chrome extension is retiring Accessed 30 Oct 2026
Sources link directly to providers. Product buttons may use separately labeled affiliate links. Read our disclosure.