A lightweight, zero-dependency client-side tool for generating deterministic hexadecimal passwords from a secret master phrase using native SHA-256 and SHA-1 hashing.
- Blind Input: Your secret master phrase is hidden during typing.
- Blind Output: The hash is never exposed on screen—you only need to copy it.
By typing Space or Enter or pressing Copy - the 3 first characters of hash will be exposed.
- Quasi-Checksum Control: Displaying only the first 3 hex characters lets you instantly verify that you typed your master phrase correctly without revealing your secret master phrase or whole hash.
- Eye Comfort: Eliminates visual clutter from long, unreadable strings of random characters.
- Shoulder-Surfing Protection: Keeps your full generated passwords and your secret master phrase safe from onlookers, cameras, or screen sharing.
- Red Warning Border (Copy Alert): Upon clicking COPY, a pulsing red border lights up around the screen. This serves as an immediate visual reminder to hit Reset All once you've pasted your password.
- One-Click Reset All: Clears input fields, wipes generated hashes, clears the clipboard, and restores default styles.
- Anti-Autofill Max: Uses randomized input element names and auto-fill ignore flags (
data-bitwarden-ignore,data-lpignore) to stop browser extension managers from capturing your secret phrase. - No access to Internet (Strict CSP): Embedded Content Security Policy (
connect-src 'none') blocks all outgoing network traffic. The tool runs 100% locally and securely in your browser.
- Open
index.htmlin any web browser. - Type your secret phrase into the input field.
- Check the first 3 characters to verify your input by typing
SpaceorEnteror pressingCopy. If you want, you can continue to type. This can be used as an intermediate checkpoint. - Click COPY next to
SHA-256orSHA-1. - Paste your password where needed, then click Reset All to clear everything and wipe the clipboard.