Skip to content

Home / Methodology

Methodology

CriteriaWeight
Security & encryption35%
Price & value20%
Ease of use20%
Platform coverage15%
Customer support10%

How We Score Password Managers

Every password manager on LearnRankReviews is scored against the same five weighted criteria shown in the table above. Using one fixed rubric keeps the ratings comparable: a 9.2 for one manager means the same thing as a 9.2 for another. This page explains what we look at under each criterion and where our information comes from.

Security & Encryption (35%)

Security carries the most weight because a password manager holds the keys to everything else. We look at whether the vault is encrypted on your device before it is synced (end-to-end, zero-knowledge design), which encryption standard is used (AES-256, XChaCha20 or equivalent), how the encryption key is derived from your master password, and which two-factor options protect the account — authenticator apps, hardware security keys and passkeys.

We also weigh transparency and track record: published independent audits and penetration tests, open-source code where available, bug-bounty programmes, and the company’s history of security incidents and how openly it handled them. A serious breach lowers a score even if the encryption itself held.

Price & Value (20%)

We compare list prices for individual, family and business plans, and we look closely at what free plans actually allow — especially device limits, which decide whether a free plan is usable day to day. We note when an introductory price renews at a higher rate. Value means what you get for the money, so a cheap plan with major gaps doesn’t automatically score well.

Ease of Use (20%)

We assess setup and import options, the browser extensions and mobile apps, which kinds of forms the manager can fill (logins, addresses, cards, one-time codes), passkey support, sharing, and how clearly the apps explain security settings. Ease of use matters because a manager that is awkward to use pushes people back to reusing passwords. How well autofill works can vary from site to site, so we always recommend checking it on your own accounts during a free plan or trial.

Platform Coverage (15%)

We check which operating systems have native apps (Windows, macOS, Linux, iOS, Android), which browsers have extensions, and whether features are consistent across platforms. A manager that only works fully inside a browser, or has no Linux app, scores lower here.

Customer Support (10%)

We look at the support channels each vendor offers on each plan (email, chat, forums), the quality of its help centre and migration guides, and how clearly it communicates during security incidents.

How the Final Score Is Calculated

Each criterion is scored from 0 to 10, then combined using the weights above into a single score out of 10, rounded to one decimal place. Scores are not adjusted for affiliate relationships. The score is our editorial rating — it is not an average of user reviews.

What Our Scores Don’t Measure

We don’t publish speed benchmarks or claim lab results we haven’t produced. Some things simply depend on your own setup: how well autofill works on a particular bank’s login page, how an app behaves on an older phone, or whether a vendor’s support team answers quickly in your time zone. Where that is the case, we say so in the review and recommend testing the manager on your own accounts during its free plan or trial.

Scores also can’t capture every personal priority. If open-source code, a Linux app or a particular jurisdiction matters most to you, use the filters in our rating rather than relying on the overall score alone.

How to Use Our Scores

Treat the overall score as a starting point. Narrow the list to managers that support all your devices, decide whether you need a free plan, then read the reviews of the two or three that remain — the “Who it’s best for” section of each review is often more useful than a decimal point of difference in score.

Sources and Updates

Our information comes from the vendors’ security documentation, published audit reports, official pricing and platform pages, and public reporting on security incidents. We update a review when a vendor changes its plans or prices, publishes a new audit, adds or removes a major feature, or discloses a security incident; the date on each page shows the last update. If you notice something out of date, please let us know through our contact page.