MyPassGen
Security notes
What we compute, where it runs, and what never leaves the device.
These are the constraints the product is built on. Expand a row for the exact rule.
No alternate ciphers. Authenticated encryption for files and burn-link payloads.
Plaintext, keys, and files stay on the device by default. Nothing is uploaded for generation, audit, cleaning, or file-box work.
Fragments are not sent with the HTTP request. The server can hold ciphertext; it does not receive the key.
No registration for any tool. Recipients of a burn-link reading page also do not need an account.
Random mode defaults to 16 characters and warns below 8. File box writes .lock or .enc.