You've been putting it off. We all have.
That email from Have I Been Pwned. The breach notification from your bank. The nagging feeling that your "master password" is on 47 different websites.
The problem isn't awareness. It's time. Changing 50+ passwords manually takes 4-8 hours of mind-numbing clicking. Nobody has that kind of time.
But what if you could change all your passwords in 30 minutes?
The math problem with manual password changes
Let's be honest about what manual password changes actually involve:
| Step | Time per site |
|---|---|
| Navigate to site, log in | 30 seconds |
| Find account settings | 20 seconds |
| Find password/security section | 15 seconds |
| Click "Change Password" | 5 seconds |
| Enter current password | 10 seconds |
| Generate new password | 15 seconds |
| Paste new password (twice) | 15 seconds |
| Submit and verify | 15 seconds |
| Update password manager | 20 seconds |
| Total per site | ~2.5 minutes |
For 50 accounts: 2+ hours (assuming zero interruptions)
For 100 accounts: 4+ hours
For 150 accounts: 6+ hours
Reality check: With interruptions, 2FA prompts, forgotten passwords, and locked accounts, double those estimates.
The 30-minute method
Here's how to actually change all your passwords fast:
Step 1: Export your passwords (5 minutes)
Every major password manager exports to CSV:
1Password:
- Open 1Password desktop app
- File → Export → All Items
- Choose CSV format
- Save file
Bitwarden:
- Web vault → Tools → Export Vault
- Choose CSV format
- Download file
LastPass:
- Advanced Options → Export
- Choose CSV format
- Save file
Chrome:
- Settings → Passwords → More options (⋮)
- Export passwords
- Save CSV file
Step 2: Review and prioritize (5 minutes)
Open your CSV and sort by priority:
| Priority | Account type | Examples |
|---|---|---|
| P0 - Critical | Financial, Email | Bank, Gmail, PayPal |
| P1 - Important | Healthcare, Work | Patient portals, Slack |
| P2 - Medium | Shopping, Social | Amazon, Instagram |
| P3 - Low | Everything else | Forums, newsletters |
Focus on P0 and P1 first. You can batch P2 and P3 later.
Step 3: Choose your automation method
Option A: AI automation tool (fastest)
Tools like Dosel use AI to navigate each website and change passwords automatically:
- Import your CSV
- Select accounts to change
- Start automation
- Handle 2FA prompts when they appear
- Export updated CSV
Time for 50 accounts: ~30 minutes (supervised)
Option B: Google Chrome (limited)
Chrome recently added automatic password changes, but only for partner sites:
- Works: Spotify, Duolingo, H&M
- Doesn't work: Most banks, Amazon, social media
Time for 50 accounts: 3-4 hours (most sites still manual)
Option C: Manual with shortcuts (slowest)
If you must do it manually, use keyboard shortcuts:
Cmd/Ctrl + L→ Focus address barCmd/Ctrl + Shift + P→ Open password manager- Use password generator hotkey
Tab→ Navigate forms quickly
Time for 50 accounts: 4-6 hours
Step 4: Import updated passwords (5 minutes)
After automation completes, import the updated CSV back to your password manager:
1Password:
- File → Import → CSV
- Select updated file
- Map fields, import
Bitwarden:
- Tools → Import Data
- Select format: CSV
- Choose file, import
Step 5: Verify critical accounts (10 minutes)
Spot-check your P0 accounts:
- Primary email (log in, send test email)
- Main bank (log in, check balance visible)
- Password manager (lock/unlock)
If any don't work, you have the old password in your original CSV backup.
What to expect during automated password changes
The AI handles
- Navigating to each site
- Finding the password change form
- Entering old and new passwords
- Clicking submit buttons
- Verifying success
You handle
- 2FA prompts — AI pauses, you enter code, AI continues
- CAPTCHAs — Solve and click continue
- Unusual verification — Security questions, phone calls
What gets skipped
Some sites can't be automated:
| Reason | Example | Action needed |
|---|---|---|
| Heavy anti-bot | Some banking sites | Manual change |
| Unusual flow | Security questions required | Manual change |
| Site redesigned | Form fields changed | Retry or manual |
| Account locked | Too many attempts | Reset first |
Good automation tools report these clearly so you know which few to handle manually.
Security considerations
Keep your CSV safe
Your exported CSV contains all your passwords in plaintext.
Do:
- Delete it immediately after import
- Never email it or upload to cloud storage
- Use secure deletion (empty trash)
Don't:
- Leave it on your desktop
- Store it in Dropbox/Google Drive
- Keep "just in case"
Use local-first tools
For something as sensitive as passwords, prefer tools that run locally:
| Approach | Your data goes to |
|---|---|
| Cloud automation (Operator) | OpenAI servers |
| Browser-based tools | Third-party servers |
| Local automation | Nowhere (stays on your machine) |
Generate strong passwords
During automation, use passwords that are:
- 16+ characters minimum
- Mix of uppercase, lowercase, numbers, symbols
- Completely random (not based on words)
- Unique per site (never reused)
Example: K7$mPx2@nQvB9!hLwR4e
When to change all your passwords
Definitely change now
- You received a breach notification
- You reuse passwords across sites
- You haven't changed passwords in 1+ years
- Your email password is old
- You use simple/memorable passwords
Consider changing
- New job (old work passwords might be known)
- Relationship change (shared accounts)
- Lost/stolen device
- Public WiFi usage without VPN
Regular schedule
For optimal security, rotate passwords:
| Account type | Frequency |
|---|---|
| Critical (email, banking) | Every 6 months |
| Important (work, healthcare) | Annually |
| Everything else | After breaches |
Frequently asked questions
What if I forget to change one account?
Keep your original CSV (securely) until you've verified everything works. You can always check the old password there.
Will sites lock me out for changing passwords too fast?
Possibly, if you're doing it manually across dozens of sites in quick succession. Automation tools typically add delays to avoid triggering rate limits.
What about passkeys? Should I switch to those instead?
Passkeys are excellent where supported, but most sites don't support them yet. For now, you need strong passwords as the foundation, with passkeys as an addition where available.
Can I change passwords on my phone?
Most automation tools require a desktop computer since they need to control a full browser. Mobile password changes are typically manual.
What if the AI changes my password wrong?
Good tools show you what's happening and verify each change. If something goes wrong, you have the previous password in your backup CSV.
Stop procrastinating, start automating
Dosel changes passwords using local AI—no data leaves your Mac. Import your passwords, click start, handle 2FA prompts, done.
- 50 passwords: ~30 minutes
- 100 passwords: ~1 hour
- Free tier: 5 password changes per month
- Unlimited: $2.99/month
Download Dosel → — 5 free automated password changes per month, no credit card required.
The best time to change your passwords was before the breach. The second best time is now.