TrovePass
Offline password generator — one master password for every site
The TrovePass contributors Password & 2FA Security
Screenshots
Description
TrovePass derives a password for each of your websites and apps from a single master password — offline, with no account, on the device alone.
WHAT IT DOES
* Derives a site's password from your master password: the same site, login and options always produce the same password, on any device, with nothing stored.
* Remembers the site, login and options you used, so you never have to recall the counter and the character classes behind a password.
* Saves a password only when you press Save on it, and seals what you save with a key this device holds.
* Shows a fingerprint of your master password — a squared tile in two colours — so a typo is visible before it derives the wrong password.
* Speaks 85 languages, and asks for no permission of any kind.
WHAT IT DOES NOT DO
* No account, no sign-in, no sync, no telemetry, no analytics.
* No network code, and no network permission: there is nothing here that could send anything anywhere.
* The master password is never stored, in any form. Nothing asks you to unlock anything either — saved passwords are sealed with a key that never leaves the device.
THE SAME PASSWORDS AS LESSPASS
Both apps derive a password from the same inputs in exactly the same way, quirks included, so a password you generated with LessPass is the password TrovePass gives you. This is an independent implementation of the published format, not a fork.
WHO IT IS FOR
Anyone who would rather remember one master password than fifty: a site name and the master password are enough, on any device, with no account to create and nothing to lose if the phone is lost.
LICENCE
GPL-3.0-or-later. The complete source of this app is published under that licence.
What’s new (1.0.0)
First release. Derives a site's password offline from one master password, byte-identical to the LessPass format; remembers the sites and options you used; keeps the passwords you save in this device's own sealed store; a visual fingerprint makes a mistyped master visible. 85 languages. No accounts, no network code, no permission of any kind.
Comments