Small by design. Yours by nature.

Your passwords.
No vault.

A stateless password generator.
The same details. The same password. Every time.

Open source ↗WebAndroidDesktop & CLI

Free to use · Generated on your device

Fine ink-drawn mountain peaks beneath a terracotta sun
Same details.
Same password.
Anytime.

A familiar starting point.

Illustrative example
Site
example.com
Login
[email protected]
Master password
••••••••••••
Full Version

Your master password is entered only in the app.

Remember one. Recreate the rest.

Less to store.
More to keep.

Pass combines your site, login, master password, and settings to generate a password locally. Use exactly the same details later to get the same result.

No password vault to synchronize. No account needed to begin.

See how it works ↓

Simple, and repeatable

How it works.

01

Enter your details

Choose the site and login, enter your master password, and set the length, character types, and counter.

02

Generate locally

Pass derives your password on your device. Copy it into the service you are signing in to.

03

Recreate anytime

The same inputs and settings produce the same password. Keep them consistent across your devices.

Download

Choose your Pass build.

Version 0.2.9. Every package is covered by the release SHA256SUMS checksums.

Android

Native app with master-password storage protected by device authentication. Android 5.0 and newer; no Internet permission.

The F-Droid listing is currently unavailable. Use the direct APK above.

Web app

Open Pass in your browser. Passwords are generated entirely on your device.

Only what you need

A smaller kind of tool.

Stateless

Your passwords are derived from your details, rather than kept in a password vault.

Local

Generation runs on your device. No remote service is needed to calculate a password.

Portable

Use the same generator on Android, desktop, in your browser, or from a terminal.

Open source

Read the code, follow releases, and make it your own. Available under the BSD 3-Clause license.

Built around your privacy

Your master password
stays yours.

The browser and desktop apps derive passwords locally. The website has no analytics, accounts, or backend API. The Android app does not request Internet permission.

Read the source →

A few things to know

Before you begin.

Is Pass a password manager?

Pass is a stateless generator. It recreates a password from your inputs instead of storing a vault of passwords. App profiles can help you remember site settings; they are separate from password generation.

What must I remember?

Your master password and the exact site, login, and generation settings. A change to any input changes the output. There is no master-password reset service.

How do I change a generated password?

Increase the counter in the app, then change the password at the service too. Keep the new counter with your other site settings so you can recreate that password later.

Does this work with LessPass?

Pass is an independent implementation of the LessPass generation algorithm. Matching inputs and compatible settings produce the same result. Pass is not affiliated with or endorsed by the LessPass project.