Help What is LesS/KEY & how it works click to open

LesS/KEY is a password manager that stores no passwords. It re-generates each one on demand from your single master password plus the name of the account. The same name and master always produce the same password, so there is nothing secret to leak, sync, or back up, and you only ever remember one phrase. By default each password is six short, memorable words. That is the correct horse battery staple idea from xkcd 936, built on the classic S/KEY one-time-password scheme (RFC 2289).

Nothing leaves your device. Everything happens locally. Your master password and the passwords it generates are never sent anywhere, never stored on a server, and never logged. There is no account, no sync, and no tracking. The app is a single page plus a WebAssembly module, with its fonts bundled in. Once it has loaded, it makes no network requests at all.

Quick password

Type an account name and your master phrase. The password appears instantly, masked. Click it to reveal, or press Copy. Store remembers the name (never the password) in this browser.

Console

The full command line. Type help for every command. Your list of names lives only in this browser (localStorage), never on a server. Use Export or Import to move it yourself (for example, to and from a Notion page).

Naming rules

After a name you can add a length and a mode. R is six memorable words (the default); C camel; H hex; B base64; D digits (U… = upper). For example, github 20R.

Runs the real hel engine compiled to WebAssembly, the exact same generator as the command-line tool. No server, no account, no tracking, nothing to leak.

Generate

Quick password

The same name and master always regenerate the same password. The result updates live as you type, entirely in your browser. Your master and the generated password never leave this device. Nothing is stored unless you press Store.

result
Console

All commands

The full hel command line: ls, add, enc, gen, comment, correct, help, … Your catalog persists in this browser (localStorage). Generated passwords are masked; click to reveal.

>