Show HN: NoKey, a Distributed Password Manager Without a Master Password

  • Hi all!

    This is my first time posting something to HN, so please be kind.

    I wanted to show what I’ve been working on for the last 6 months:

    NoKey, a password manager without a master password. Instead, you can unlock your passwords by confirming from another device. E.g. if you need a password on your PC, you only have to confirm this on your phone. No need to remember any passwords!

    The vast majority of the code is written in Elm and it’s fully open source.

    There is a browser extension for Chrome and Firefox and an Android app. The application is only useful with at least two devices, so to really test it out, you’ll have to install it on two devices. There is no iOS version and the web app doesn’t work on Safari either (it's missing some stuff from the Web Crypto API), sorry!

    Any feedback or questions are greatly appreciated!

  • This is a great idea and a great example of distributed "consumer" app.

  • I like the Correct Horse Battery Staple approach to the pairing mechanism ;-)

  • Even though it's different, but in terms of usage, I think it's like a decentralized 2FA (or MFA) solution?

  • Seems like a good idea. What happens when I lose both my devices?