LessPass

lesspass.com
LessPass

LessPass is a little different, since it generates your passwords using a hash of the website name, your username and a single main-passphrase that you reuse. It omits the need for you to ever need to store or sync your passwords. They have apps for all the common platforms and a CLI, but you can also self-host it.

Open Source

LessPass Source Code

Author

lesspass

Description

:key: stateless open source password manager

#anonymous#lesspass#password#password-manager#passwords#privacy#self-hosted

Homepage

https://www.lesspass.com

License

GPL-3.0

Created

10 Dec 15

Last Updated

16 Jun 26

Latest version

web-extension-v9.6.9

Primary Language

TypeScript

Size

48,959 KB

Stars

6,031

Forks

356

Watchers

6,031

Language Usage

Language Usage

Star History

Star History

Recent Commits

  • Guillaume Vincent (11 May 26)

    Migrate to react-native 0.85 Signed-off-by: Guillaume Vincent <[email protected]>

  • romgzn (11 May 26)

    fix: Windows test suite compatibility (#874) * fix: rename duplicate test and fix Windows path separators * fix: skip pexpect tests on Windows, fix duplicate test_exclude methods * fix: move test_length_range_type out of skipped class so it runs on Windows * polish: explicit the tests' goals Co-authored-by: Édouard Lopez <[email protected]> * refactor: replace pexpect with subprocess for cross-platform functionality * refactor: make run_lesspass support both interactive and non-interactive modes extracted into cli_test_helpers for reuse across test files * refactor(tests): make run_lesspass rely on a single Popen primitive and handle both interactive and non-interactive cases explicitly Co-authored-by: rh-gvincent <[email protected]> --------- Co-authored-by: Édouard Lopez <[email protected]> Co-authored-by: rh-gvincent <[email protected]>

  • McSinyx (09 Mar 26)

    cli: use unittest.mock in Python stdlib (#865) In addition, remove unused requirements in test-requirements.txt.

  • Guillaume Vincent (09 Mar 26)

    Upgrade node modules

  • romgzn (07 Mar 26)

    docs: Correct links in CONTRIBUTING page (#869)

  • Édouard Lopez (29 Dec 25)

    docs: correct link to issue page (#855) fixes #854

  • Guillaume Vincent (23 Dec 25)

    Update yarn

  • dependabot[bot] (23 Dec 25)

    Bump js-yaml from 3.14.1 to 3.14.2 (#852) Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.14.1 to 3.14.2. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/3.14.1...3.14.2) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  • dependabot[bot] (23 Dec 25)

    Bump node-forge from 1.3.1 to 1.3.3 (#853) Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.1 to 1.3.3. - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](https://github.com/digitalbazaar/forge/compare/v1.3.1...v1.3.3) --- updated-dependencies: - dependency-name: node-forge dependency-version: 1.3.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  • Guillaume Vincent (23 Dec 25)

    Upgrade all node modules

  • Guillaume Vincent (22 Dec 25)

    Move to python-3.12

  • Guillaume Vincent (15 Sept 25)

    Fix translation in class component We tried to use translation in KeepMasterPasswordOption component with a hook. This patch transform the component into a function component to be able to use the react hook.

  • Guillaume Vincent (12 Sept 25)

    bump eslint version

  • Guillaume Vincent (12 Sept 25)

    Bump vite and axios to latest versions

  • Guillaume Vincent (12 Sept 25)

    Add eslint test in lesspass-i18n

  • Guillaume Vincent (12 Sept 25)

    Fix do build

  • Guillaume Vincent (12 Sept 25)

    Remove the packageManager field from package.json

  • Guillaume Vincent (12 Sept 25)

    Prepare mobile application version 9.9.0

  • Guillaume Vincent (12 Sept 25)

    Translate mobile application * extract all translation into a lesspass-i18n package * use this package in the mobile application and the web component Assisted-By: Cursor

  • Guillaume Vincent (03 Sept 25)

    Redesign dark mode to see fingerprint fixes https://github.com/lesspass/lesspass/issues/841

  • Guillaume Vincent (03 Sept 25)

    Allow manual CI tests

  • Guillaume Vincent (03 Sept 25)

    Fix the version of node in the CI

  • Guillaume Vincent (03 Sept 25)

    Rollback @vitejs/plugin-react causing TypeError with useRef Uncaught TypeError: Cannot read properties of null (reading 'useRef')

  • Guillaume Vincent (02 Sept 25)

    Update mobile application This update ensures our app complies with Google Play's new 16 KB page size requirement.

  • Guillaume Vincent (07 Apr 25)

    LessPass extension version 11.0.10

  • dependabot[bot] (22 Jul 25)

    Bump form-data from 4.0.2 to 4.0.4 Bumps [form-data](https://github.com/form-data/form-data) from 4.0.2 to 4.0.4. - [Release notes](https://github.com/form-data/form-data/releases) - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](https://github.com/form-data/form-data/compare/v4.0.2...v4.0.4) --- updated-dependencies: - dependency-name: form-data dependency-version: 4.0.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]>

  • FalloutEngineer (15 Jun 25)

    Update README.md Changed incorrect IOS address

  • dependabot[bot] (11 Jun 25)

    Bump brace-expansion from 1.1.11 to 1.1.12 Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.11 to 1.1.12. - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.12) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 1.1.12 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]>

  • dependabot[bot] (20 May 25)

    Bump vite from 6.2.3 to 6.2.7 (#837) Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.2.3 to 6.2.7. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v6.2.7/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v6.2.7/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 6.2.7 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  • Guillaume Vincent (07 Apr 25)

    Hide the master password under the fingerprint Fixes https://github.com/lesspass/lesspass/issues/815

LessPass Security

3.6/10

Repo Security Summary

Updated 25 May 26

  • Code-Review 2/10
  • Packaging N/A
  • Maintained 7/10
  • Token-Permissions 0/10
  • Dangerous-Workflow 10/10
  • CII-Best-Practices 0/10
  • Binary-Artifacts 9/10
  • Pinned-Dependencies 0/10
  • Security-Policy 0/10
  • Fuzzing 0/10
  • License 10/10
  • Signed-Releases N/A
  • Branch-Protection 0/10
  • SAST 0/10

LessPass Website

Website

LessPass

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

  • IP Address 172.66.0.96
  • Location San Francisco, California, United States of America, NA
  • ISP CloudFlare Inc.
  • ASN AS13335

Associated Countries

  • NL NL
  • FR FR
  • US US

Safety Score

Website marked as safe

100%

Blacklist Check

lesspass.com was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview

LessPass Reviews

More Password Managers

About the Data: LessPass

API

You can access LessPass's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/lesspass

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share LessPass

Help your friends compare Password Managers, and pick privacy-respecting software and services.
Share LessPass and Awesome Privacy with your network!

View Password Managers (6)