Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Passman – A Stateless, Offline-First Password Manager (Proof of Concept) (github.com/lambriniworks)
2 points by LambriniWorks 11 months ago | hide | past | favorite | 2 comments


Passman is a stateless, offline-first password manager that eliminates the risks of traditional vault-based solutions like LastPass, Bitwarden, and 1Password. Instead of storing passwords in a vault, Passman mathematically regenerates them on demand, making it impossible to steal what isn’t stored.

This is a proof-of-concept release, and minimal testing has been completed. The goal is to challenge conventional password management by proving that a zero-storage model can work. Looking for security researchers, developers, and privacy advocates to test, break, and improve it. How Passman Works

    You enter your master password and a website/app name.
    Passman mathematically derives a password from these inputs.
    The password is copied to your clipboard for immediate use.
    The clipboard automatically clears after 60 seconds to prevent leaks.
    Nothing is stored—no vaults, no sync, no cloud. Everything is derived in real-time.
Core Features

    No vaults, no storage, no sync – Nothing to steal, nothing to hack.
    Mathematically derived passwords – Always reproducible, never saved.
    Auto-copy to clipboard – Prevents keyloggers without manual copying.
    Clipboard auto-clear after 60 seconds – No lingering passwords.
    Encrypted transformation rules – Securely export/import between devices.
    Open-source and GPL-3 licensed – Anyone can verify or improve it.
GitHub: https://github.com/LambriniWorks/Passman Install in seconds: git clone https://github.com/LambriniWorks/Passman.git && cd Passman

This is not a finished product. It is a proof-of-concept to demonstrate that password managers don’t need to store passwords at all. If there’s nothing to steal, there’s nothing to hack.

If you care about security, privacy, or cryptography, try it out and let me know what you think. Looking for feedback from anyone who can test it, break it, or suggest improvements.


Versions of this idea have been kicking about for ages, you can probably find some other implementations even just on HN (and the commentary on them, which will probably mostly say that this is a bit of a design dead end).

I hit this one with a basic search https://news.ycombinator.com/item?id=8889012 which is not super informative but there are definitely more of them out there.

Edit: Oh wait, I used your description and it starts churning them up. There'll probably be more links in the threads

https://hn.algolia.com/?q=stateless+password+manager




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: