Security & Privacy · Open source

TrovePass

The TrovePass contributors

Offline password generator — one master password for every site

Download

Opens the official F-Droid page

TrovePass screenshot 1TrovePass screenshot 2TrovePass screenshot 3TrovePass screenshot 4TrovePass screenshot 5TrovePass screenshot 6

About TrovePass

TrovePass derives a password for each of your websites and apps from a single master password — offline, with no account, on the device alone.

WHAT IT DOES

* Derives a site's password from your master password: the same site, login and options always produce the same password, on any device, with nothing stored.

* Remembers the site, login and options you used, so you never have to recall the counter and the character classes behind a password.

* Saves a password only when you press Save on it, and seals what you save with a key this device holds.

* Shows a fingerprint of your master password — a squared tile in two colours — so a typo is visible before it derives the wrong password.

* Speaks 85 languages, and asks for no permission of any kind.

WHAT IT DOES NOT DO

* No account, no sign-in, no sync, no telemetry, no analytics.

* No network code, and no network permission: there is nothing here that could send anything anywhere.

* The master password is never stored, in any form. Nothing asks you to unlock anything either — saved passwords are sealed with a key that never leaves the device.

THE SAME PASSWORDS AS LESSPASS

Both apps derive a password from the same inputs in exactly the same way, quirks included, so a password you generated with LessPass is the password TrovePass gives you. This is an independent implementation of the published format, not a fork.

WHO IT IS FOR

Anyone who would rather remember one master password than fifty: a site name and the master password are enough, on any device, with no account to create and nothing to lose if the phone is lost.

LICENCE

GPL-3.0-or-later. The complete source of this app is published under that licence.

What's new in 1.0.0

First release. Derives a site's password offline from one master password, byte-identical to the LessPass format; remembers the sites and options you used; keeps the passwords you save in this device's own sealed store; a visual fingerprint makes a mistyped master visible. 85 languages. No accounts, no network code, no permission of any kind.

How to install TrovePass

  1. Tap Download — the app's official page on F-Droid opens.
  2. Install it with the F-Droid app (recommended, for automatic updates), or use the download button on that page.
  3. If Android asks, allow the F-Droid app or your browser to install apps, then tap Install.
  4. Open TrovePass from your app drawer.

More security & privacy apps

More