No vault to breach
Password managers keep your passwords in a vault. If the vault leaks, everything leaks. Keyverse keeps nothing and recalculates every time.
Keyverse does not store your passwords, it calculates them. You have one key, and every site’s password is derived from it on the spot. No stored password means no password to steal.
No sign-up, no email, no cloud. Runs in your browser.
Password managers keep your passwords in a vault. If the vault leaks, everything leaks. Keyverse keeps nothing and recalculates every time.
The Android app ships without the INTERNET permission. Even if we wanted to send your data, the operating system would not let us.
Same key, same site name, same password. On your phone, in your browser, years later. No syncing needed, because there is nothing to sync.
Every key has its own planet. Get one character wrong and you see a completely different world, before you generate a wrong password.
The app generates a 20-character key. You print it once and keep it safe.
Choose from the catalog or type a name. "YouTube", "youtube.com", all the same.
It is calculated instantly. Copy, paste, done. Nothing is ever written down.
This planet is derived from your key, your visual fingerprint. Type a key below and watch the planet shift with every character. Change one letter and it is a completely different world.
teal, swirled, with rings, 2 moons · This is a demo. Nothing you type here is saved.
We did not invent our own crypto. Your key becomes a master secret through Argon2id, each site password is derived from it with HMAC-SHA256 and HKDF, and characters are chosen by rejection sampling so no character is more likely than another. The whole algorithm is written down and open.
You lose your passwords and nobody can bring them back, including us. That is not a shortcoming, it is the design: if we could recover your key, so could someone else. It is also why the app will not let you into your vault until you have saved your recovery kit.
You tap "Refresh". The counter for that site goes up by one and a completely new password is calculated. Every other site is unaffected.
You can set the length between 8 and 64 and switch character types on or off. When you change the settings you get a short "recipe code" (e.g. v1-16-ULD-2). Note it down and you can reproduce the same password on any device.
They can reach all of your passwords. Think of your key like a master password. The difference is you do not have to memorise it. If your key is compromised, the app’s "Change key" wizard generates a new one and walks you through each site.
Because a cloud backup would mean a server to attack. The only security promise Keyverse makes is "there is no data to send". A sync feature would cancel it.
No. No ads, no subscription, no analytics, no accounts.
Create your key, print your recovery kit, get your first password.
Get startedComing soon on Google Play
The Android app is in review. The web version works today.