TheCode by JulSql

TheCode is a password manager that stores none. Each password is recomputed in your browser, on demand, from a master key only you know and the name of the site.

ONE KEY. ONE PASSWORD PER SITE.
• Same key + same site = exactly the same password, on every device.
• Different sites = unrelated passwords.
• Nothing to steal: no password is saved, neither in the browser nor on a server.

The derivation (PBKDF2 with 600,000 iterations, then HMAC-SHA256) is documented, tested and reproducible: your passwords do not depend on a service staying alive.

FEATURES
• The password for the open site, computed in one click from the toolbar
• Offered right next to password fields, for the username typed on the page
• Vault: remember each site's username, length and characters — never the password
• Vault locked by your master key
• Length from 4 to 40 characters, choice of lowercase, uppercase, digits, symbols
• Default settings remembered, and shared across your devices if you have an account
• Vault transfer to your other devices through an encrypted QR code
• Automatic, end-to-end encrypted sync, optional
• Sign in with Google or with an email address
• No ads, no trackers, no analytics

PRIVACY
• Your master key never leaves your device; it is wiped when the browser closes.
• Without an account, the extension contacts no server: everything works offline.
• With an account, the vault is encrypted in the browser before it is sent: the server sees neither your sites nor your usernames.
• Page content is never stored or sent.
• Open source under the Apache 2.0 licence.

EVERYWHERE, WITH THE SAME KEY
Extensions for Chrome, Firefox, Edge and Brave, iPhone, iPad, Mac and Android apps, and the website thecode.julsql.fr. The same key gives you back the same passwords on each of them, even without sync.

FREE
Generation, the vault and filling are free and unlimited. A free account syncs a few entries across three devices; the complete plan, on thecode.julsql.fr, lifts those limits.

HOW IT WORKS
1. Pick a long master key and remember it: it cannot be recovered.
2. Open a site and click the TheCode icon, or the suggestion next to the password field.
3. The password appears: insert it or copy it.