One secret. Every password. Nothing to breach.
Keygrain derives unique passwords from a single secret you remember. No vault. No database. Works without an account. Just math.
Free and open source · Works offline · All platforms
Keygrain derives unique passwords from a single secret you remember. No vault. No database. Works without an account. Just math.
Free and open source · Works offline · All platforms
Remember one secret. Get a unique password for every site.
Same secret + any site = unique password. Computed locally, never stored.
Designed to minimize attack surface.
64 MiB memory, 3 iterations. Makes brute-force attacks against your secret computationally expensive (~1s per guess on a single CPU core).
No password database exists. Passwords are recomputed on demand. There is nothing to breach.
Site configurations (not passwords) sync between devices using AES-GCM encryption derived from your secret. The server sees only ciphertext.
Free and open source. No account required.
pip install keygrain
Python 3.10+ · CLI + library