Regenerate,
don’t retrieve
The same versioned recipe regenerates the same result, every time.
OFFLINE BY DESIGN · OPEN SOURCE
Passwords you don’t have to store.
acctpass regenerates a unique, strong password for every account from one encrypted local seed and a recipe only you control.
No cloud accountEncrypted local seed
Same recipe, same resultPasswords never saved
Most password tools retrieve a secret from a vault. acctpass takes a different route: it reconstructs the secret only when you need it.
One local secret.
Every account.
Regenerate,
Local by
default
No account, no sync service, and no network connection required.
Rotate without
starting over
Increment the counter to create a new password for one account.
A SMALL, EXPLAINABLE SYSTEM
From master password
to account password.
Your master password unlocks a random local seed. The seed and account recipe then flow through a deterministic, versioned process.
Unlock the seed
Argon2id derives the key used to decrypt your local vault.
Describe the account
Service, account, counter, length, and symbol preference.
Derive locally
HMAC-SHA256 turns the seed and recipe into deterministic bytes.
Copy, then forget
The result is copied for use and never added to the vault.
01
LOCAL INPUTEncrypted seed
64 MiB02
ACCOUNT RECIPEgithub.com · alice@… · 01
24 chars03
GENERATED IN MEMORY•••• •••• •••• ••••
CopiedTHE DESKTOP APP, AVAILABLE NOW
The CLI’s behavior, made approachable.
The native app uses a Rust/Tauri backend and compatibility vectors that check its password output against the Go CLI.
Choose your platform ↓macOSApple Silicon + Intel DMG
AvailableWindowsEXE setup + MSI installer
AvailableLinuxAppImage · DEB · RPM
AvailableCLI-compatible vaults
Import the same encrypted seed without changing existing passwords.
Hidden by default
Generate and copy without leaving the password visible on screen.
Clipboard clearing
Clear the copied password after 45 seconds if it is still unchanged.
Encrypted transfer
Export or import an encrypted vault copy when moving devices.
SECURITY, WITHOUT THE SLOGANS
Designed to be inspected, tested, and questioned.
acctpass names the exact primitives it uses and the limits it has. It does not call unaudited software “military-grade.”
Vault key derivation
Argon2id
64 MiB · time cost 3 · 1 threadSeed encryption
XChaCha20-Poly1305
Authenticated encryption with a random noncePassword derivation
HMAC-SHA256
Versioned context and rejection sampling Independent audit pending
For critical or regulated accounts, use an audited password manager.
Security policy ↗A DIFFERENT TRADEOFF
Not a password manager in disguise.
Encrypts and retrieves saved passwords.
Best for autofill, passkeys, sharing, recovery, or sync.
Regenerates passwords from a local seed.
Best for a tiny offline tool when you accept the backup tradeoff.
DOWNLOAD THE DESKTOP BETA
Install acctpass.
Choose the package for your platform. This beta is not commercially signed or notarized, so your operating system may show an unverified-developer warning.