LessPass is a stateless password manager that generates deterministic, site-specific passwords entirely on the client device. It uses a pure function to derive passwords from a master password combined with site details, producing the same output every time without storing any secrets on a server or requiring network access. This approach means passwords can be recalculated on any device from remembered inputs, with no database synchronization needed.
The project distinguishes itself through its counter-based password rotation, which allows changing a site's password by incrementing a counter while keeping the master password unchanged. It provides cross-platform client applications including a web interface, browser extensions, and an Android app, all performing password derivation locally. Users can save complex password profiles that store site-specific rules like character types and length, excluding the master password, to reuse settings across sessions without re-entering details.
For those who prefer full data control, LessPass supports self-hosted deployment of the password profile database using Docker and Docker Compose. The documentation covers installation through these client applications and the self-hosting setup.