Keygrain — Generate Password

Keygrain — Generator

Deterministic credential generation from your master secret — no vaults, no server storage, just math.

🔒 Master Secret

Email Your email — binds with your secret to scope derivations Master Secret Memorize it, never store it.

Color dots confirm your secret. Same colors = same secret.

🛡️ Security, Privacy & Verifiability (Zero-Network Guarantee)

Zero Network Traffic: This page performs zero network requests once loaded. All derivations run client-side in your browser's memory using Web Crypto and WebAssembly. You can disconnect Wi-Fi, enable Airplane Mode, or save this page to your computer (file://) and it functions identically.

Verifying Vendored Cryptographic Libraries: Keygrain has zero npm build dependencies. All third-party libraries are vendored as exact, unmodified releases from public registries. You can independently verify their SHA-256 integrity:

                
                            File
                            Upstream Release
                            SHA-256 Checksum
                        
                            hash-wasm-argon2.js
                            hash-wasm@4.12.0
                            dcec617a2e1b700fa132d1583a186cb70611113395e869f2dd6cc82b415d3094
                        
                            tweetnacl.js
                            tweetnacl@1.0.3
                            3ec535c004aeeb225785d8e93fb33bf99f52e399bd7dfc01969b5629baea5131
                        
                            bip39-wordlist.js
                            BIP-39 English (2048 words)
                            2f5eed53a4727b4bf8880d8f3f199efc90e58503646d9ff8eff3a2ed3b24dbda (wordlist text)

File	Upstream Release	SHA-256 Checksum
`hash-wasm-argon2.js`	hash-wasm@4.12.0	`dcec617a2e1b700fa132d1583a186cb70611113395e869f2dd6cc82b415d3094`
`tweetnacl.js`	tweetnacl@1.0.3	`3ec535c004aeeb225785d8e93fb33bf99f52e399bd7dfc01969b5629baea5131`
`bip39-wordlist.js`	BIP-39 English (2048 words)	`2f5eed53a4727b4bf8880d8f3f199efc90e58503646d9ff8eff3a2ed3b24dbda` (wordlist text)

Verify in your terminal: curl -sL https://cdn.jsdelivr.net/npm/hash-wasm@4.12.0/dist/argon2.umd.min.js | sha256sum and curl -sL https://cdn.jsdelivr.net/npm/tweetnacl@1.0.3/nacl-fast.min.js | sha256sum. All other code on this page is unminified vanilla JS.