Recordable Password Generator vs TheCode Password Manager

Please note: This is not a password manager! Most people use a single password on every account they have, and it is usually a bad one (too common, too simple and too short). Stop using “123456” and “password”! Password managers are great (and I encourage you to use one), but there are instances where the device you are using can’t (or shouldn’t) have one installed and/or have harder input methods (a router, public/shared computer, an IOT device, etc). On these occasions, you shouldn’t sacrifice security. The passwords that this App generates are relatively easy to remember and to type, and are a lot better and safer than the ones a human can come up with. I use the Diceware™ concept, but instead of using a physical dice, I use a cryptographically secure offline random number generator (the one included in your device's OS) to "roll the numbers".

TheCode is a password manager that stores no passwords. Each one is recomputed on your device, on demand, from a master key only you know and the site's name. ONE KEY. ONE PASSWORD PER SITE. • Same key + same site = exactly the same password, on every device. • Different sites = unrelated passwords. • Nothing to steal: no password is saved, neither on the device nor on a server. The derivation (PBKDF2 with 600,000 iterations, then HMAC-SHA256) is documented, tested and reproducible: your passwords do not depend on any service staying alive. FEATURES • AutoFill on iPhone, iPad and Mac: TheCode offers the password in Safari and in apps, with the account's username • Vault: keep each site's username, length and characters — never the password • System save prompts: TheCode only keeps an account when it can recompute its password • Vault lock with Face ID, Touch ID or your master key • Password masked by default, revealed with one tap • Length from 4 to 40 characters; lowercase, uppercase, digits, symbols • Default settings remembered, and shared across your devices with an account • Move your vault to another device with an encrypted QR code • Optional automatic sync, end-to-end encrypted • Sign in with Apple, with Google or with an email address • No ads, no trackers, no analytics PRIVACY • Your master key never leaves your device: it is kept in the keychain. • Without an account, the app contacts no server: everything works offline. • With an account, the vault is encrypted on the device before it leaves: the server sees neither your sites nor your usernames. • The camera is only used to read a transfer QR code; no image is saved. • Open source under the Apache 2.0 licence. EVERYWHERE, WITH THE SAME KEY iPhone, iPad and Mac apps, the Android app, extensions for Chrome, Firefox, Edge and Brave, and the website thecode.julsql.fr. The same key gives you the same passwords on each of them, even without sync. FREE Generation, the vault and AutoFill are free and unlimited. HOW IT WORKS 1. Pick a long master key and remember it: it cannot be recovered. 2. Type a site (e.g. "apple.com") and, if needed, the username. 3. The password appears. Copy it, or let AutoFill insert it. 4. Turn TheCode on in Settings > General > AutoFill & Passwords (iOS), or System Settings > General > AutoFill & Passwords (macOS).