Rekey research · hands-on test

Changed my password and now I can't log in: what your password manager does next

I ran every test on this page myself, on my own accounts.

You changed an at-risk password and now the site won't let you in. Your password manager keeps filling a password the site no longer accepts, and nothing tells you why. I recreated that on my own accounts in 1Password, Bitwarden and Proton Pass to see what each one does and what you can do about it. Every result comes from a screen recording. The data is free to download.

Why won't my password work even though it's correct?

Your password stops working because there are now two passwords, and your password manager only knows the old one. You set a new password on the site. Maybe you did it on your phone or in another browser, or the extension was switched off. The manager wasn't watching, so it never saved the new one. Autofill keeps handing the site the wrong password.

The site hasYour new passwordSet on your phone, another browser, or with the extension off

autofill sends the old one

Your vault hasThe old passwordIt never saw the change

That's what I recreated. I saved a login in each manager and switched it off. Then I changed the password on the site. I turned the manager back on with the other extensions off and let it fill the password. TypeRacer was the one site where all three managers finished the test:

Clicks counted from landing on the sign-in page with the vault unlocked. Proton Pass also finished the test on a second site (below). The other runs were incomplete and are marked that way in the data file.

1Password got me to the error fastest. Its bar at the top of the page filled the password and submitted it in one click, against three for the other two. Fast is great when the password is right. When it's wrong, you hit the wall sooner.

At the error: what each manager showed

Here's the moment the site refused the old password. Find the red error under the password box, then look for anything from the manager. Tap any screenshot to see it full size.

The silence is the real problem. You can't tell whether you mistyped, the change failed or someone took over the account. Your manager knows the password it filled was refused, and it says nothing.

What does my password manager do after I sign in?

Your password manager offers to save the right password once you sign in, but on TypeRacer only Bitwarden offered to update the login it already had. What they offer decides whether you end up with one correct login or two that clash.

So Proton Pass did the right thing on one site and not the other. Loganix asks for your email first and the password on a second screen; TypeRacer has both on one page. Why it behaved differently, I can't say from one run each.

Which password manager handles a changed password best?

Bitwarden handled the changed password best on TypeRacer. It was just as silent as the others at the error. But it was the only one that offered to fix the login it already had, and one click left me with one correct login. That's one run per manager on one site. Read it as what happened on my account, not a ranking for every site.

Getting back in took the same effort everywhere: type the new password, sign in, save. That's 3 steps in all three managers. None of them used the failed attempt to help.

What should I do right after a password change fails?

After a failed password change, stop the old password from going in again. Get in with the right one, then make the vault match the site. Tick each step as you go.

1. Stop filling the saved password. Once the site refuses it, it'll keep refusing it. In my test the site refused the old password every time it was submitted.
2. Check the item's history and the generator history.Ours Item history may still hold a password the vault once had. If your manager generated the new one, its generator history may have it even though it was never saved. More on history.
3. Sign in with the right password, or reset it. Type it by hand if you know it. If you don't, use the site's forgot-password link instead of digging through the vault.
4. When the save prompt appears, choose Update. Not New Item, not Add. You want one login with the right password, not two.
5. Delete any duplicate straight away. Otherwise the copy with the old password gets offered next time and fails again.
6. Leave your master password alone. A site refusing a saved password doesn't mean your vault is at risk. While you're in, check your recovery setup instead.
7. Prove it's fixed.Ours Open a private window and sign in with the login your manager fills. If that works, the vault and the site match and you're done. My guide to changing an at-risk password without getting locked out covers how to avoid this next time.

Did this start with an email? Check the alert inside your password manager, not through a link in the email.

Can password history get my working password back?

Password history can only give back a password your vault once had. That makes it the fix for one situation and useless for the other.

• Your vault had the working password, then you saved over it. History is your friend here. 1Password "saves previous versions of items every time you make changes" (1Password, item history). Bitwarden "stores the last five saved passwords for each login item" (Bitwarden, password history).
• The site has a password your vault never saw. That's the case my test recreated, and item history can't help with it. The one exception: if your manager generated that password, check its generator history. Bitwarden says its list helps "when you generate a password but forget to save it" (Bitwarden), though it's kept per app and cleared when you log out. And Dashlane's lists generated passwords "including passwords that have never been saved to a login" (Dashlane). If it isn't there either, you're no longer recovering a password. You're proving to the site that you own the account.

How much history you get varies a lot, from 5 passwords in Bitwarden to 100 changes in LastPass. The table below has all eight.

How do I recover my master password?

Master password recovery only works with something that was in place before you got locked out: a recovery code, key or phrase, a device that's still signed in, biometrics, or a trusted contact or admin. LastPass adds one more: your previous master password, if you changed it in the last 30 days. That's a different problem from a refused site password. It locks the vault itself, and it's the one people fear most. I read the help pages of eight password managers on 29 September 2026 and re-checked every quote on 14 October 2026.

Master password suddenly not working?Ours Check the simple things before you assume it's lost: Caps Lock, your keyboard language, and whether a device that's still signed in will open the vault.

"Not stated" means the help page I read doesn't say, not that there's no limit. Tap a manager below for the ways back in, the exact wording and the sources. Also in the recovery data file.

• BeforeAlmost every way back in has to exist before you're locked out. LastPass's 30-day revert to your previous master password is the main exception.
• 7 of 8start you over with a new or empty vault if nothing was set up. Proton keeps the account but not the data from before the reset.
• 24 h1Password's block on a recovery code tried after a recent sign in, on top of an hour's wait after you create one.
• PremiumBitwarden's emergency access needs a paid plan. On the free plan it isn't a way back in.

When nobody can help you

If you lose access to a zero-knowledge vault, support can't recover it for you. The company never holds a key to your data, which is why you picked it. So the real question is whether your recovery code or key is stored somewhere outside the vault it unlocks.

One thing that isn't a way back in: 1Password's Secret Key. 1Password says it "is not a backup code. It doesn't let you sign in if you forget your 1Password account password" (1Password, Secret Key). Keep it, and your Emergency Kit, somewhere outside the vault too.

What does AI search get wrong about recovery?

AI search gets recovery wrong in ways that can lock you out. On 5 September 2026 I asked ChatGPT, Google AI Mode and Perplexity four recovery questions, 12 answers in all. 5 of them had at least one of these mistakes. I reopened every answer on 14 October 2026.

• "Change your password manager master password" Perplexity told someone with a breached site password to change their master password. A leaked site password doesn't touch the vault. Changing your master password adds a new risk: forget it with no recovery set up and the vault is gone. Saved answer.
• Emergency access, no price tag Three answers recommended Bitwarden's emergency access as a way back in without saying it's a Premium feature. Google AI Mode even called Bitwarden the free option in the same answer. Perplexity · ChatGPT · Google AI Mode.
• A "Master Password Reset" that isn't one Google AI Mode listed Bitwarden's recovery code as a "Master Password Reset". To use that code you enter your email, master password and the code, and it turns off two-step login (Bitwarden). Saved answer.
• A 25-word phrase that's really 12 Google AI Mode said Proton Pass uses a 25-word recovery phrase. Proton's is 12 words (Proton). Saved answer.

Key takeaways

• 3 of 3managers filled the old password after I changed it behind their backs.
• 0 of 3said anything when the site refused it. Stop filling it yourself.
• 2 of 3offered a second login on TypeRacer. Pick Update, then delete any duplicate.
• 3 stepsto get back in, in all three. None used the failed attempt to help.
• Historyonly returns what your vault saw. Check generator history if the manager made the password.
• Set it upbefore you need it. Almost every way back into a locked vault has to exist in advance.

How this was tested

Free to reuse under CC BY 4.0 with a link to this page.

Corrections: if a vendor ships a fix or you get a different result, open an issue on Rekey's public GitHub repo. I'll re-test and date the change here.