gitmyhub

acctpass

CSS ★ 1 updated 9d ago

Offline deterministic password generator that creates unique account passwords without storing them.

A command line tool that generates strong, unique passwords for your accounts using a master password and an encrypted seed file, without storing any generated passwords.

CSSRustTauriArgon2idXChaCha20-Poly1305HMAC-SHA256setup: moderatecomplexity 2/5

acctpass is a small command line tool that generates strong, unique passwords for your accounts without storing any of them. It works entirely offline, meaning there is no server, no account to sign up for, no cloud sync, and no saved list of generated passwords. It runs on macOS, Linux, and Windows.

The way it works is straightforward. You provide a master password and the tool holds one encrypted local seed file. When you want a password for a specific account, you give it details like the platform name, your email, and an optional counter. The tool combines your master password, the encrypted seed, and those details to produce the same strong password every time you ask for it. The generated password itself is never saved to disk. It uses Argon2id, XChaCha20-Poly1305, and HMAC-SHA256 for its cryptographic operations.

The tool gives you control over the symbols that appear in generated passwords. By default it uses a set of common special characters, but you can restrict which ones appear or exclude specific ones. The important thing to remember is that symbol settings are part of what determines the password. If you change the symbol restrictions later, you will get a different password, so you need to use the same settings each time you regenerate.

The author is clear about what acctpass is and is not. It is not a full password manager. It does not autofill forms, sync across devices, share credentials with a team, or help you recover lost data. It is just a deterministic generator. The README recommends using a dedicated password manager if you need those features. The project has not been professionally audited, and the README lists several limitations, including the risk that malware on your computer could steal passwords when they are generated or copied to the clipboard.

There is also a cross platform native app version in development using Rust and Tauri, targeting desktop and mobile platforms. Existing command line vaults can be imported into the app without changing seeds or generated passwords. The project is released under the MIT license.

Where it fits