Antivirus & Password Managers, without the scare tactics
The one antivirus I recommend, and the free baseline if you won't pay. Five picks for what actually stops the infections I clean up: Malwarebytes Premium, Microsoft Defender, and three password managers worth trusting.
FTC DISCLOSURE. Computer Medic Repair & Service LLC is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.com. None of the picks on this page are sold through Amazon. As of publication we have no affiliate agreement with any company on this page, and the buttons go straight to each company's own site. If that ever changes, we may earn a commission at no extra cost to you, and this note will say so. Our recommendations are based on independent research and real-world reliability data, not on commission rates.
When a computer comes to me "full of viruses," it almost never got that way because it didn't have expensive antivirus. In the infections I clean up, the way in is usually one of four things: a browser extension that turned bad (or was bad from the start), a fake tech-support pop-up that talked someone into calling a number and letting a stranger remote in, a reused password that leaked in some other company's breach, or an email or bank account with no two-factor login, so a stolen password was all it took.
Antivirus helps with some of that. It can't stop you from typing your password into a fake login page or letting a scammer onto your screen. So this guide is split in two: the protection layer (where my answer is Malwarebytes Premium, with the free Microsoft Defender you already have as the baseline if you won't pay), and the password layer, where spending a little actually changes your odds.
⚠ Before you buy anything: the free fixes that matter mostTurn on two-factor login for your email first. Your email account is the master key, since every "forgot password" link goes there. Use an authenticator app or a passkey where offered rather than text messages. Then: remove any browser extensions you don't recognize or don't use; never call a phone number that appears in a pop-up (Microsoft and Apple don't put phone numbers in warnings); and keep Windows, your browser, and your phone updated. All of it is free and does more than any paid suite. Prices below marked * are an October-2026 snapshot from each company's own pricing page; most of these discount the first year, so I list the renewal price too. Check before you sign up.
Ratings run a deliberately honest 4.0 to 4.5. Nothing here earns a 5.0. Every one of these companies had something in the last year worth telling you about, and it's in the field notes.
Section A · The protection layer
Pay for one antivirus, and make it this one.
Antivirus ads sell fear: a red shield, a countdown, "your PC is at risk." I'm not going to do that. Windows already ships with a real antivirus, and it's a respectable floor. But most of what I actually clean up isn't exotic malware. It's adware, browser hijackers, fake "PC cleaner" bundles, and scam pages, and the one product I've standardized on for stopping that is Malwarebytes Premium. Two picks here: the one I recommend, and the free baseline if you won't pay for anything. Skip the big suites with a VPN and identity monitoring bolted on; the password manager they bundle is usually weaker than the ones in Section B.
Pick 01 · The antivirus I recommend
Malwarebytes Premium (Standard plan · 3 devices)
4.5 / 5·DX·13A
PlanStandard (Premium Security)
Price~$36* yr 1 / ~$60/yr after
Devices3 · Windows, Mac, Android, iOS
AV-TEST Aug 20266 / 6 / 6 (Top Product)
ExtraBrowser Guard extension (free)
This is the one I recommend, and the only antivirus I send people to. When a machine comes through my virus and malware removal service, Malwarebytes Premium is what I install before it goes back to you. It's real-time protection that is specifically good at the things I actually clean up: adware, browser hijackers, fake "PC cleaner" bundles, scam pages, and the "potentially unwanted programs" a lot of antivirus lets slide because they're technically legal.
It isn't just my preference. In AV-TEST's August 2026 home-user round it scored a perfect 6/6/6 for protection, performance, and usability, and earned a "Top Product" award. One subscription covers three devices across Windows, Mac, Android, and iOS, which matters in a house where the Mac and the phones would otherwise have nothing. Malwarebytes sells it today as the Standard plan; the feature list still calls it Premium Security, and Premium is the name most people know it by.
Why not five stars: the price on the box is a first-year deal. About $36 for three devices the first year, then about $60 a year after that (October 2026, from Malwarebytes' own pricing page). That's still less than the big suites charge, but budget for the renewal. The Plus plan adds a VPN for a little more; most households don't need it.
⚠ Field noteOne real-time antivirus, not two. When Premium installs, it registers in Windows Security as your antivirus and Defender's real-time scanning steps back. That's by design. Don't add a second paid antivirus on top of it; two real-time scanners fighting each other is what slows PCs to a crawl. And if you ever let the subscription lapse, open Windows Security and make sure Defender has switched back on.
⚠ Renewal pricing
The "Save 40% today" price is the first year only. Budget for the ~$60* renewal, and if you don't want it to auto-renew, turn that off in your Malwarebytes account the day you buy.
Strong points
Perfect 6/6/6 at AV-TEST (Aug 2026)
Catches adware, PUPs, and scam pages other AV lets slide
One subscription covers Windows, Mac, and phones
Browser Guard blocks scam and fake-support pages
Light on performance
Real-world drawbacks
Renewal ~67% higher than the first-year price
Sold as "Standard," not "Premium," which confuses people
Microsoft Defender Antivirus (free, built into Windows 10 and 11)
4.0 / 5·DX·13B
PriceFree (built in)
PlatformsWindows 10 & 11
AV-TEST Aug 20266 / 5.5 / 6 (Top Product)
Real-timeYes, on by default
Ransomware shieldControlled folder access (off by default)
If you won't pay for anything, you're not unprotected: if you run Windows 10 or 11, you already own a real antivirus. Microsoft Defender Antivirus is built in, turned on by default, and costs nothing. In AV-TEST's August 2026 home-user round it scored a perfect 6 out of 6 for protection and earned a "Top Product" award, the same protection score as Bitdefender, Norton, and Malwarebytes' paid tier.
It also comes with the pieces most people forget they have: SmartScreen, which warns you before you run a download or visit a site Microsoft already knows is bad; tamper protection, which stops malware from simply switching Defender off; and a ransomware feature called controlled folder access, which only lets programs you approve change your Documents, Pictures, and Desktop folders.
What I tell people at the kitchen table: Defender is a respectable floor, and a big step up from the expired trial suite a lot of new laptops ship with. But it's tuned for outright malware, and in my experience it lets more of the adware, hijackers, and scam junk that lands machines on my bench slide than Pick 01 does. If you're going to pay for one thing in this guide besides a password manager, make it Malwarebytes Premium. Either way, run only one real-time antivirus at a time.
⚠ Field noteTwo settings worth two minutes. Open Windows Security → Virus & threat protection → Manage ransomware protection and switch on controlled folder access. It ships switched off. The first week it may ask you to approve a program or two that saves into your Documents folder. Approve the ones you recognize. Then under App & browser control, make sure reputation-based protection is on, including the setting that blocks potentially unwanted apps. That's the one that catches the junk toolbars and "PC cleaner" bundles.
⚠ Windows 10 reality check
Windows 10 stopped getting regular security updates on October 14, 2025. Defender can still catch known malware on an old Windows 10 machine, but it can't patch the holes in Windows itself, and those holes are how a lot of attacks get in. If your PC can run Windows 11, upgrade. If it can't, Microsoft's Extended Security Updates program buys some time, but a plan to replace it is the real fix.
Strong points
Free, already installed, nothing to renew
Perfect 6/6 protection score at AV-TEST (Aug 2026)
SmartScreen blocks known-bad downloads and sites
Tamper protection and a built-in ransomware shield
No yearly renewal to remember
Real-world drawbacks
Ransomware shield ships switched off
Slightly heavier on performance than the best paid suites (5.5/6)
Windows only. Doesn't cover Macs, phones, or tablets
A password manager does two things antivirus can't. It lets you use a different, long, random password on every site, so one company's breach doesn't unlock your email, bank, and Amazon account. And it only autofills on the real website, so a fake login page that looks perfect to you gets nothing from the password manager. That second part is quietly one of the best anti-phishing tools a regular person can have.
Notice what's missing: LastPass. In 2022 attackers stole LastPass customers' encrypted vault backups along with unencrypted details like website addresses. Vaults protected by weak or old master passwords can be cracked offline at the attacker's leisure, and investigators have since tied cryptocurrency thefts to vaults taken in that breach. LastPass settled a U.S. class action for $24.5 million in 2025, and the UK Information Commissioner's Office penalized it in November 2025. If you're still on LastPass: move to one of the three picks below (all of them import from LastPass), and then change the passwords that were in your vault back in 2022, starting with email, banking, and anything holding cryptocurrency. Moving alone doesn't help if the old vault is already out there.
And the free option many people already have, the password saver built into Chrome, Edge, Safari, or your phone, is far better than reusing passwords. If that's all you'll actually use, use it. The three picks below are better at sharing with family, work across every browser and device, and warn you about weak and reused passwords. Whichever one you pick, the most important step is to turn on two-factor login for the password manager itself.
If you've been putting off a password manager because of the cost, Bitwarden removes the excuse. The free plan stores unlimited passwords and syncs across all your devices: phone, laptop, desktop, every major browser. That's more than most competitors give away. The code is open source, and the company pays outside security firms to audit it regularly.
Premium is $19.80 a year and adds the built-in two-factor code generator, emergency access (a trusted person can request your vault if something happens to you), and file attachments. The Families plan, $47.88 a year for six people, is the best deal in this guide for a household. Every member gets their own private vault plus shared folders for the Wi-Fi password, the streaming accounts, and the insurance logins.
The honest trade-off: Bitwarden is a little less polished than 1Password. The apps are functional rather than pretty, and setting up shared family folders takes a few more clicks. For most people that's a fine price for the savings.
⚠ Why this isn't a 5 (2026)Bitwarden had a messy year. In February 2026 it doubled Premium from $10 to $19.80 a year, announced inside a feature-update blog post rather than told to customers directly. In May it dropped "always free" from its marketing, then put it back after the tech press noticed. The free plan is still there and still the best free plan in the category, but that's the kind of wobble I watch. Separately, researchers at ETH Zurich published a study in February 2026 listing 12 attacks against Bitwarden. They only work if an attacker has already taken over Bitwarden's own servers, and the companies were given 90 days to fix them before publication. Bitwarden also changed leadership twice this spring. None of that has meant a leak of customer passwords. All of it is why this is a 4.5 and not a 5.
⚠ Field noteKeep the browser extension updated, and know about the 2025 autofill flaw. In August 2025 a researcher showed that a malicious web page could trick most password-manager browser extensions into autofilling data with one click. Bitwarden shipped a fix that month. The same researcher later flagged a remaining overlay variant, so my recommendation is to set the extension to fill from the toolbar icon or a keyboard shortcut instead of the pop-up menu inside web pages. It costs one extra click and closes that door.
Individual~$2.99/mo* yr 1, then ~$3.99/mo (billed yearly)
Families~$4.49/mo* yr 1, then ~$5.99/mo, 5 people
Free planNone (14-day trial)
Extra protectionSecret Key + master password
BusinessTeams & Business plans
1Password is the one I recommend when the person who has to live with the password manager isn't technical. The apps are the most polished in the category, family sharing is simple to set up, and the recovery setup means a family organizer can help someone back into their account without a call to support.
There's also a real security difference. Your vault is locked with your master password plus a 34-character Secret Key that lives only on your devices. If 1Password's servers were ever breached the way LastPass's were, a stolen vault would be useless to someone who only guessed your master password. That design is why I'm comfortable recommending it to small offices, where the Teams and Business plans add the admin controls an office manager needs.
The catch is price. There's no free plan, just a 14-day trial, and after the first-year promotion (only for new customers who buy directly at 1password.com) it's about $48 a year for one person and about $72 a year for a family of five. That's roughly 2.5 times Bitwarden for one person and half again more than Bitwarden's six-person family plan.
⚠ Field noteThe 2025 autofill clickjacking flaw. 1Password was one of the extensions affected by the DOM-based clickjacking attack shown at DEF CON in August 2025, where a booby-trapped web page could get the extension to fill in card details or personal info with a click or two. As of the researcher's January 2026 update, he still listed 1Password as vulnerable. My workaround, same as for Bitwarden: turn off the inline autofill menu and fill from the toolbar icon or the keyboard shortcut, and keep the extension updated. Logins on sites you didn't intend to visit should never autofill on their own.
Strong points
Most polished apps. Non-technical people stick with it
Secret Key makes a stolen vault far harder to crack
Simple family sharing and account recovery
Real Teams/Business tiers for small offices
No customer vault data lost in its history (2023 Okta incident touched no user data)
Real-world drawbacks
No free plan, just a 14-day trial
Most expensive pick here, more so after the promo year
Proton Pass comes from Proton, the Swiss company behind Proton Mail and Proton VPN. Its free plan is unusually generous: unlimited passwords, unlimited devices, passkey support, and alerts for weak and reused passwords. The apps and extensions are open source, and Cure53, the same firm that audits Bitwarden, audited Proton Pass in 2023.
The feature that earns it a spot in this guide is hide-my-email aliases. Instead of giving every store, newsletter, and app your real email address, Proton Pass makes a unique forwarding address for each one. When one of those sites gets breached (and some will), the attacker gets an alias that only works for that site. Their phishing emails can't follow you everywhere, and you can switch the alias off with one tap. The free plan includes 10; Pass Plus (about $36 a year) makes them unlimited and adds the built-in two-factor code generator, emergency access, and dark-web monitoring.
Where it ranks below Bitwarden: it's younger, with fewer years of track record, and its best value shows up if you already use (or want) Proton Mail. For someone choosing a password manager on its own, Bitwarden's free plan is the safer default. For someone who wants to cut down on spam and phishing at the source, Proton Pass is the better fit.
⚠ Field noteAliases are only as good as your recovery setup. If you sign up for your bank with an alias and later lose access to your Proton account, those forwarded emails stop arriving. Set up a recovery email or phone in Proton's settings, and turn on two-factor login for the Proton account itself before you move important accounts onto aliases.
Strong points
Generous free plan, no device limit
Hide-my-email aliases cut phishing and spam
Open source; Cure53 audit (2023)
Patched the 2025 clickjacking flaw
Swiss company with a privacy-first business model
Real-world drawbacks
Younger product, shorter track record
Fewer years in the field than Bitwarden or 1Password
Unlimited aliases and 2FA codes need the paid plan
Antivirus picks lean on independent lab results, mainly AV-TEST's August 2026 home-user Windows round (protection, performance, and usability, each scored out of 6), weighed against what actually brings computers to a repair bench: scams, junk software, and stolen passwords rather than exotic malware. Password managers were rated on what happens if the company itself gets breached, published security research from 2025 and 2026 and how quickly each company responded to it, price after the first year, and whether a non-technical family member will actually keep using it.
Prices are October-2026 snapshots taken from each company's own pricing page. Marketing claims from the vendors themselves were the lowest-weight signal; every vendor's comparison chart happens to show its own product winning.
Related reading: antivirus can't undo ransomware once your files are encrypted. A backup can. See Issue 07 — Cloud Backup Services.
DX·13 — Issue 13 — Antivirus & Password Managers — Computer Medic Repair & Service LLC, Clearwater FL — Published October 2026