Deterministic password generator using PBKDF2 with domain-specific salts for secure, memorable passwords.
Password.now.sh is a deterministic password generator that creates unique, secure passwords for different websites and services using a single master password. It applies PBKDF2 cryptographic hashing with domain-specific parameters to generate consistent passwords without storing them anywhere. This solves the problem of password reuse while eliminating the need for password managers that store your data.
Security-conscious developers and users who want to manage multiple passwords without relying on third-party password managers or memorizing numerous credentials.
Developers choose this because it provides a zero-knowledge, self-contained solution that gives users complete control over their passwords without external dependencies. The deterministic nature means no password storage is needed, reducing attack surfaces while maintaining strong cryptographic security.
🔐 One password, right way.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Uses PBKDF2 to generate the same password for identical inputs every time, eliminating the need for password storage and reducing attack surfaces, as outlined in the README.
Implements PBKDF2 with SHA256 HMAC and configurable iterations (e.g., 10,000 + password index), ensuring robust security against brute-force attacks.
Combines TLD and username to create unique salts for each service, preventing password reuse and enhancing security, as specified in the algorithm.
Follows a philosophy where passwords are generated, not stored, giving users complete control without relying on external services, aligning with the project's value proposition.
The project is primarily a JavaScript snippet without a graphical user interface, requiring users to develop their own front-end for practical use, which adds complexity.
Losing the master password means losing access to all derived passwords with no recovery mechanism, as the system relies solely on deterministic generation.
Uses the RFC1924 alphabet, which may not meet all website password requirements, potentially causing compatibility issues in real-world applications.
Password is an open-source alternative to the following products:
A password manager that securely stores passwords, credit cards, and other sensitive information with end-to-end encryption.
Dashlane is a password manager and digital wallet application that stores passwords, personal information, and payment details securely.
LastPass is a password manager that stores encrypted passwords online, providing secure access across multiple devices.