Generation
Twenty random characters, generated on your device.
The passwords Repass sets are made locally and never leave your machine in a form anyone else can read.
A good password is long and random. That is the whole specification, and it is one humans are bad at meeting: the passwords people invent cluster around the same words, substitutions and dates, which is precisely what cracking software is built to try first.
Repass generates 20 characters of real randomness for each account, which is well past the point where guessing is a viable attack. You never have to see it, type it, or remember it.
Generation happens in your browser. The password is encrypted on your device before anything is sent anywhere, so our servers hold ciphertext they cannot open.
More
The rest of what Repass does
Find accounts connected to your email
Every service you ever signed up for sent you an email. Repass reads those to build the list, so you find out about the 2016 forum account before somebody else does.
Reset reused passwords
Reuse is the single thing that turns somebody else's security failure into your problem. Repass replaces them in bulk instead of one painful evening at a time.
Reset compromised passwords
Rotating an exposed password matters more than rotating an old one. Repass does the rotation, on every account that needs it.
Store passwords securely
Your vault is sealed on your device. What our servers hold is ciphertext, and they do not have the key.
Change passwords automatically
Repass drives each site's real forgot-password flow in your own browser, and stops to ask when a site wants a human.
Two minutes from now
Your passwords stop being your problem.
3-day free trial · end-to-end encrypted · you can watch every step
