A password system with no database, no sync, and nothing to breach
Hi HN, Bastion Enclave is an experiment in removing centralized trust from password management by eliminating server-side state entirely. Instead of storing an encrypted vault or syncing secrets through a backend, Bastion computes credentials deterministically on-the-fly using explicit cryptographic inputs. Given the same master entropy, service name, username, and version counter, the same password is reproduced across platforms. There is no account system, no database, and no persistent server storage — the server serves static code only. Password generation uses domain-separated salts and…
A password system with no database, no sync, and nothing to breach launched on February 6, 2026 with 14 votes, #861 of 16,627 launches that month and more than 90% of that year's launches.
In plain words
Bastion Enclave is a password manager that generates credentials on-the-fly rather than storing them. It eliminates servers, databases, and accounts by deriving passwords deterministically from a master key, service name, username, and version counter using cryptographic functions. The same credentials reproduce across devices without syncing or server-side storage. It is designed for users seeking password management without centralized infrastructure or breach risks.
written from the facts on this page · September 2026
From the sources
In the maker’s words, at launch
Hi HN, Bastion Enclave is an experiment in removing centralized trust from password management by eliminating server-side state entirely. Instead of storing an encrypted vault or syncing secrets through a backend, Bastion computes credentials deterministically on-the-fly using explicit cryptographic inputs. Given the…
Does a similar job
all alternatives →
Covert – Rewrite of HashiCorp Vault Using Rust, SQLite and Litestream2023 · github.com · ▲54Contribute to fmeringdal/covert development by creating an account on GitHub.
CryptexVault – Decentralized Password Manager2023 · cryptex-vault.com · ▲11Hi everyone! We started working on this project last year because a password manager that we used was being sold to another company and stopped offering their service. We were not happy with the alternatives that were available so we decided to give it a shot and build our own. We are now at a point where we have a working Beta and are looking for some feedback from the community. The main idea is to have data synchronization without a central server (single point of failure). When you create a Vault (inside which you can store your credentials and other sensitive data), you can "Link" it to…
- BIBastion – isolated Linux VMs for background coding agentsJun 2026 · bastion.computer · ▲32
Self-hosted virtual machines for background coding agents.
Isolate – 2FA(OTP) SSH bastion host2017 · github.com · ▲11Contribute to devopsprodigy/isolate development by creating an account on GitHub.
Citadel Password Manager2025 · apps.apple.com · ▲13Your private vault for passwords and sensitive data.
Secs-man, a secrets manager you can (not) rely onJun 2026 · github.com · ▲31This is a tool to manage encrypted local backups of secrets. The core idea is that it aims to be usable without depending on it, meaning that even if the software disappeared from the face of Earth tomorrow, your data would still be recoverable. It also integrates nicely with NixOS (which is what I use, though it does not require NixOS to be used). I have summed up a bit of explanation and some answers to reasonable questions in a blog post: https://baldino.dev/blog/secs-man/
More dev tools this month
the category →
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 29d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 27d ago · github.com
Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.
Dev tools · 16h ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 24d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 21d ago · talanoa.email
Source: Show HN post ↗ · launch text quoted in part
Launched alongside, February 2026
the whole month →
Lovon AI Therapy▲801Feel closer and have more fun with your partner every day!
AI · Feb 2026 · lovon.app
Hello my name is Ben Ward for the past 3 years I have been remastering the financial game Wall Street Raider created by Michael Jenkins originally on DOS in 1986. It has been a rough journey but I finally see the light at the end of the tunnel. I just recently redid the website and thought maybe the full story of how this project came to be would interest you all. Thank you for reading.
Work · Feb 2026 · wallstreetraider.com