Academy

LessPass – The Stateless Password Machine

LessPass does not store passwords. It derives each one from the site name, your login, and a master passphrase, using a published method. There is no database to sync or steal. Browser and phone apps exist, and the code is open. Change the counter when a site forces a new password.

The master passphrase is the whole vault. Anyone who learns it, and who knows the site and the login, can recompute the password without ever touching your devices. There is no way to revoke a site except by moving the counter and updating that site. Different password rules on different sites make the options part of the secret, and you have to remember those too. It is a sharp tool for a small number of logins, not a household vault.

Use it only if you understand the master passphrase is everything. lesspass.com

LessPass options, including the counter and the character set, are part of the password. If you forget you checked symbols, you cannot log in, and there is no vault to look it up in. Write the options down with the master passphrase, which means you now have a secret on paper anyway. At that point a normal manager is less fragile. LessPass fits a traveler who will not sync a database and who can remember the rules. It fits almost nobody else as a primary vault.

BellCrier breach check

Is your email already in a data breach?

Most people are, and never hear about it. BellCrier checks your email against known data breaches for free, then alerts you when it turns up in a new one, with exactly what leaked and how to fix it.

  • Free instant check
  • No password needed
  • Alerts for you and your family

Opens bellcrier.com with your email filled in. Nothing is checked until you confirm there.