Deterministic Password

Computes passwords from your master password, so losing the file is no longer scary. KeePass (.kdbx) compatible. Offline.

Deterministic Password computes passwords instead of only storing them. A password is derived from your master password, the site, your user name and a version number, using Argon2id and HMAC-SHA-256. If the database file is lost, you can compute the same passwords again from the same inputs. To change a password for a site, raise the version. It is also a full KeePass password manager. It opens, edits and saves ordinary .kdbx files (KDBX 4, AES-256, Argon2id), so you can keep using the same database in KeePassXC, KeePass or KeeWeb. Fully offline: no account, no cloud, no network requests. The database is decrypted in memory, and the master password never leaves the extension. • Popup: shows the entries for the current site. Click one to fill in the login, or copy the user name, password or one-time code (TOTP). • Right-click → Fill: fills the login form. Two-step sign-ins such as Google and Microsoft work too. • Full mode in the side panel: groups, tags, search, history, attachments, a recycle bin and the password generator, kept open beside the page. • New sites: it suggests a derived password, fills both fields of a registration form and saves the entry. • Safe filling: logins go only to the site the entry belongs to. Hidden trap fields are skipped, and an https entry is never filled into an http page. • Auto-lock after an idle time you set, or when the screen locks.