uPass is a web-based generator of secure passwords.

uPass takes your master password (e.g my_password) and, optionally, current domain (e.g http://accounts.google.com converts into google) and generates 12-letter mix of letters, numbers and symbols (e.g 0EQu$MwEm?Qt). Watch video demo.

Now you can create unique secure password for any website, and you only have to remember one master password.

Your master password never leaves your device. uPass is 100% client-side, pure Javascript, no data is sent to server. It's just a webpage, so it works on Windows, Mac OS X, Linux, Android, iOS, Windows Phone, webOS, and any future OS too.

Bookmarklet
Drag this link ā†’ uPass ā† into your browser's bookmarks bar (below address bar). You might need to turn it on from Bookmarks menu. Not for mobile browsers.

Use on iPhone/iPad
Open uPass in your mobile browser, tap "Share" button, tap "Add to Home screen".

Use on Android
Open uPass in your mobile browser, add it to bookmarks, open bookmarks, tap and hold upass.in, tap "Add to Home screen".



Why use uPass, not LastPass/KeePass/1Password/RoboForm/etc?
I tried them all, honestly. LastPass was the best, but still far from perfect. uPass is not perfect too - but it reflects my vision. I encourage you to give it a try.

Why bother with secure passwords at all?

How safe is uPass?
It's as safe as your master password. And because uPass is not so popular, no one will guess you use it.

How do I come up with strong master password?

What happens if upass.in is down?
You should save a local copy of uPass right now, just in case. As for the server, there are no access logs, and as I mentioned, no data is transmitted from you.


I am Upamanyu Das. You can find out more about me at upamanyu.in.
Please send your comments, compliments and complaints to upamanyu@upamanyu.in.

uPass has been inspired by SuperGenPass.


For users who need to keep using uPass v.1, it's here - http://www.upass.in/1/. I recommend switching to v.2 although it means changing all your password (which is actually a good idea from time to time). The v.1 generator did not validate for including most required types of characters (lowercase, uppercase, digits, special), which caused problems on some sites.