Public beta · v0.1.0

Passwords you don’t have to store.

acctpass regenerates a unique password for every account from an encrypted local seed and a recipe only you control.

macOS · Windows · Linux

acctpass desktop app showing the local password generator
1 Account recipe 2 Local master password 3 Generate and copy

Most password tools retrieve a saved secret. acctpass reconstructs it only when you need it.

One local secret.
Every account.

Regenerate,
don’t retrieve.

The same versioned recipe produces the same result whenever you need it.

Local by default.

No account, sync service, or network connection is required.

Rotate deliberately.

Increment the version to replace one account password without changing the rest.

From master password
to account password.

Your master password unlocks one encrypted seed. acctpass combines that seed with the account recipe and derives the result locally.

  1. 1.0

    Unlock the seed

    Argon2id derives the key used to decrypt your local vault.

  2. 2.0

    Describe the account

    Enter the service, identity, version, length, and symbol rule.

  3. 3.0

    Derive locally

    HMAC-SHA256 turns the seed and recipe into deterministic bytes.

  4. 4.0

    Copy, then clear

    The app copies the result and clears it after 45 seconds if unchanged.

acctpass corev1
01

LOCAL INPUTEncrypted seed

vault.json
02

ACCOUNT RECIPEgithub.com · alice@… · 02

20 chars
03

GENERATED IN MEMORY•••• •••• •••• ••••

Copied
No network requestNo saved password

The CLI’s behavior, made approachable.

The native app uses a Rust/Tauri backend and compatibility vectors that check its password output against the Go CLI.

Choose your platform
macOS

Apple Silicon + IntelDMG packages · ad-hoc signed beta

Available
Windows

Windows 10/11 x64EXE setup + MSI installer

Available
Linux

Linux x64AppImage · DEB · RPM

Available
01

CLI-compatible vaults

Import the same encrypted seed without changing existing passwords.

02

Hidden by default

Generate and copy without leaving the password visible on screen.

03

Clipboard clearing

Clear the copied password after 45 seconds if it is still unchanged.

04

Encrypted transfer

Export or import an encrypted vault copy when moving devices.

Security without slogans.

The code names its primitives and its limitations. The project has not been independently audited.

Vault key derivationArgon2id64 MiB · time cost 3 · 1 thread
Seed encryptionXChaCha20-Poly1305Authenticated encryption · random nonce
Password derivationHMAC-SHA256Versioned context · rejection sampling

Independent audit pending. For critical or regulated accounts, use an audited password manager.

Read security policy

Not a password manager in disguise.

TRADITIONAL MANAGER

Encrypts and retrieves saved passwords.

Best for autofill, passkeys, sharing, recovery, and sync.

ACCTPASS

Regenerates passwords from a local seed.

Best when you want a small offline tool and accept the backup tradeoff.

Download acctpass.

Choose your platform. This first beta is not commercially signed or notarized, so your operating system may show an unverified-developer warning.

View release notes

macOS downloads

For M1 and newer Macs, choose Apple Silicon.

Prefer the terminal? The CLI remains available on every desktop platform.

go install github.com/Falcn8/acctpass@latest