TL;DR – Master Password is not another
password manager. This app will replace all your passwords with new strong passwords generated from your new master
password; passwords are stored nowhere and need no sync, cloud or backups.
This app will securely generate strong and unique passwords for any purpose, in a way that nobody can log or trace.
Better yet, even if you somehow lose everything, you can effortlessly recreate all your passwords.
WHY MASTER PASSWORD?
Master Password is unique in the way it solves the password problem.
The algorithm it uses was specifically designed to combat the drawbacks other password managers suffer from:
• Vault apps (eg. 1Password): You need to sync and make backups to avoid losing everything. Without access to the vault, no passwords.
• Cloud apps (eg. LastPass): You need to trust they don't listen in or get gagged and compelled to. No Internet, no passwords.
By using a unique cryptographic algorithm, Master Password generates the password for your site ON-DEMAND, completely OFF-LINE and using nothing but your name and master password.
That means your passwords are not stored on your phone, there's nothing to keep in sync, no reliance on a third party, no need for syncing, copying or backing up. If your phone gets stolen or confiscated, there are no passwords in the app.
Master Password can also:
• Generate a user name for your sites, so you can't forget it or to provide additional anonymity.
• Generate answers to security questions, so you don't need to share your private life experiences under the false veil of "security".
WHY DO I NEED A PASSWORD APP?
• Re-using a memorable password is like giving everyone your car keys.
• Inventing many good passwords is difficult; remembering them, almost impossible.
• "Clever" encoding schemes such as Tr0ub4dor&3 don’t work either: criminals know we do this and brute-force it with ease.
IS MASTER PASSWORD SAFE?
There is a lot more to safety than using "military grade encryption".
• Strong passwords: They are too expensive for hackers to reverse.
• Not saved: Thieves or officials confiscating your hardware will find no secrets on it.
• Ubiquitous: You can use ANY device to instantly calculate your site passwords.
• Save custom passwords: They are AES-encrypted and saved.
• Strong protections: Salting and key derivation keep your master password safe.
• Free Software: Source available and evaluated by independent experts. There is no fairy dust, only mathematical precision.
HOW DOES IT WORK?
Master Password is based on a cryptographic algorithm hardened against all forms of attacks, including brute-force, rainbow tables, length extension, cypher weaknesses, expensive computing power, etc.
In its essence, Master Password is based on:
ENCODE( HMAC-SHA256( SCRYPT( masterPassword, userName ), siteName | siteCounter ), siteTemplate )
This is a simplified representation. See http://masterpasswordapp.com/algorithm.html for more information.
‣ Don't reuse an old password as your new master password.
‣ Check out the App Store on your iPhone or iPad for the mobile version.
‣ A short sentence is a great master password! Quick to type and easily recalled, eg. banana colored duckling
|Master Password •••| — Get immune to loss.|