LesS/KEY password generator
Help What is LesS/KEY & how it works click to open

LesS/KEY is a password manager that stores no passwords. It re-generates each one on demand from your single master password plus the name of the account. The same name + master always produce the same password — so there is nothing secret to leak, sync, or back up, and you only ever remember one phrase. By default each password is six short, memorable words — the correct horse battery staple idea from xkcd 936 — built on the classic S/KEY one-time-password scheme (RFC 2289).

Private by design. Everything happens on your device. Your master password and the passwords it generates are never sent anywhere, never stored on a server, and never logged — there is no account, no sync, and no tracking. The app is a single page plus a WebAssembly module, with its fonts bundled in; once it has loaded, it makes no network requests at all.

Quick password

Type an account name and your master phrase — the password appears instantly, masked. Click it to reveal, or press Copy. Store remembers the name (never the password) in this browser.

Console

The full command line — type help for every command. Your list of names lives only in this browser (localStorage), never on a server; use Export / Import to move it yourself (e.g. to and from a Notion page).

Naming rules

After a name you can add a length and a mode — R six memorable words (the default), C camel, H hex, B base64, D digits (U… = upper). E.g. github 20R.

Runs the real hel engine compiled to WebAssembly — the exact same generator as the command-line tool. No server, no account, no tracking — nothing to leak.

Generate

Quick password

Deterministic — the same name + master always regenerate the same password. The result updates live as you type, entirely in your browser — your master and the generated password never leave this device. Nothing is stored unless you press Store.

result
Console

All commands

The full hel command line — ls, add, enc, gen, comment, correct, help, … Your catalog persists in this browser (localStorage). Generated passwords are masked — click to reveal.

>