Generators

Stateless Password Generator

Generate passwords deterministically from a master secret and a site name. The same master secret and site name always produce the same password — no storage needed. Uses PBKDF2 with HMAC-SHA256 for key derivation, so the passwords are cryptographically derived, not just hashed. This approach means you never need to sync a password vault — just remember your master secret.

Stateless Password Generator — Derive deterministic passwords from a master secret and site name — same inputs always produce the same password

What it does

  • ▸Derives passwords from a master secret and site name using PBKDF2
  • ▸Same inputs always produce the same output (deterministic)
  • ▸Configurable password length and character set (with/without symbols)
  • ▸Uses PBKDF2 with HMAC-SHA256 for secure key derivation
  • ▸No storage required — passwords are computed on demand

Use cases

  • ▸Generating consistent passwords without a password manager
  • ▸Creating reproducible passwords for service accounts or CI/CD
  • ▸Deriving unique passwords per site from a single master secret
  • ▸Generating passwords for environments where you can't install a password manager

How it works

1

Enter your master secret (this stays on your machine)

2

Enter the site name or context (e.g., github, work-email, server-1)

3

Set password length and whether to include symbols

4

The tool derives the password using PBKDF2 and displays it

Frequently asked questions

1Is this as secure as a password manager?

It's a different approach with different trade-offs. Password managers store random passwords — if one site is compromised, others aren't affected. Stateless generators derive passwords from a master secret — if the master secret is compromised, all derived passwords are at risk. Use this for convenience in low-risk contexts, and use a password manager for high-value accounts.

2What if a site requires a specific password format?

Adjust the length and symbol options to meet the site's requirements. Since the derivation is deterministic, the same settings always produce the same password for the same site.

3How does PBKDF2 make this secure?

PBKDF2 applies HMAC-SHA256 iteratively (thousands of rounds) to derive the key. This makes brute-force attacks on the master secret computationally expensive, similar to how bcrypt slows down password cracking. The derived bytes are then mapped to password characters.

Related tools

Password Strength — Estimate password entropy, weaknesses and crack time

Password Strength

Estimate password entropy, weaknesses and crack time

Bcrypt Hash/Verify — Hash text with bcrypt or verify text against a bcrypt hash

Bcrypt Hash/Verify

Hash text with bcrypt or verify text against a bcrypt hash

Hash Generator — MD5 / SHA / CRC32 / Blake hashes and HMACs of the input text

Hash Generator

MD5 / SHA / CRC32 / Blake hashes and HMACs of the input text

Random String Generator — Generate cryptographically random strings and passwords

Random String Generator

Generate cryptographically random strings and passwords

Use Stateless Password Generator offline in Devinity

All 95 tools run locally on your Mac. No internet required, no data sent to servers.

Download Devinity →