🔑 OneKey

Deterministic passwords. No storage. Pure math.

Master Secret

Site Name

Counter

Generated Password

How It Works

OneKey never stores your passwords. It derives them mathematically from your master secret + the site name + a counter. Same inputs always give the same password. No server. No account. No vault. Just math.

Technically: PBKDF2-HMAC-SHA-256, 200,000 iterations, salt = "sitename:counter". The 32-byte output is base64-encoded and trimmed to 20 characters, with complexity substitutions if needed.