LessPass: a computed password, not a vault

Nothing to sync, and nothing to look up either

The idea is simple to say: same site, same login, same secret, same options, same password. There is no file to save. There is also no file to open if you forget the secret or an option. The result changes, and the old password is nowhere.

LessPass fits if you will write down the options that are not obvious: length, character sets, counter. Those options are part of the practical secret. Leaving them at the default without writing that down becomes a problem the day the default changes.

The online database is gone

The project announced that the LessPass Database server would be turned off on 1 March 2023. It said the static version, the extension and the mobile versions would remain. Do not look for an old online account to recover settings. They are not there.

The site calls itself open source, moved to GPLv3. You can read the calculation. You still have to trust the extension or app you install, and take it from the project, not from an unidentified copy.

A site with its own rules breaks the calculation

If a site rejects the length or the characters produced, you will change an option. Write it down at once, next to the site address. Without that note, you will regenerate a different password and think LessPass lost the first one.

This model does not keep the history of a password the site already forced you to change. After a required reset, increment the counter, or you will land on the old result.

• Generate a strong password or passphrase↗