No account · No server · No internet

One key. Infinite passwords.

Keyverse does not store your passwords, it calculates them. You have one key, and every site’s password is derived from it on the spot. No stored password means no password to steal.

No sign-up, no email, no cloud. Runs in your browser.

What makes it different

No vault to breach

Password managers keep your passwords in a vault. If the vault leaks, everything leaks. Keyverse keeps nothing and recalculates every time.

Not even internet permission

The Android app ships without the INTERNET permission. Even if we wanted to send your data, the operating system would not let us.

Same result on every device

Same key, same site name, same password. On your phone, in your browser, years later. No syncing needed, because there is nothing to sync.

You see a typo instantly

Every key has its own planet. Get one character wrong and you see a completely different world, before you generate a wrong password.

Three steps

Get your key

The app generates a 20-character key. You print it once and keep it safe.

Pick a site

Choose from the catalog or type a name. "YouTube", "youtube.com", all the same.

Get your password

It is calculated instantly. Copy, paste, done. Nothing is ever written down.

Your key has a world

This planet is derived from your key, your visual fingerprint. Type a key below and watch the planet shift with every character. Change one letter and it is a completely different world.

teal, swirled, with rings, 2 moons · This is a demo. Nothing you type here is saved.

What is underneath

We did not invent our own crypto. Your key becomes a master secret through Argon2id, each site password is derived from it with HMAC-SHA256 and HKDF, and characters are chosen by rejection sampling so no character is more likely than another. The whole algorithm is written down and open.

Read the algorithm

Frequently asked

What happens if I lose my key?

You lose your passwords and nobody can bring them back, including us. That is not a shortcoming, it is the design: if we could recover your key, so could someone else. It is also why the app will not let you into your vault until you have saved your recovery kit.

What if a site makes me change my password?

You tap "Refresh". The counter for that site goes up by one and a completely new password is calculated. Every other site is unaffected.

What if a site’s password rules do not fit?

You can set the length between 8 and 64 and switch character types on or off. When you change the settings you get a short "recipe code" (e.g. v1-16-ULD-2). Note it down and you can reproduce the same password on any device.

What if someone sees my key?

They can reach all of your passwords. Think of your key like a master password. The difference is you do not have to memorise it. If your key is compromised, the app’s "Change key" wizard generates a new one and walks you through each site.

Why is there no cloud backup?

Because a cloud backup would mean a server to attack. The only security promise Keyverse makes is "there is no data to send". A sync feature would cancel it.

Is it paid?

No. No ads, no subscription, no analytics, no accounts.

It takes a minute

Create your key, print your recovery kit, get your first password.

Get started

Coming soon on Google Play
The Android app is in review. The web version works today.