On the late night of 25th December 2025 (Christmas Night), I found myself trapped in an excruciating digital nightmare. Managing more than 20 separate Google and YouTube channels across several education and technology projects, I urgently needed to access an old, critical email account.

I stared at the login screen. The password had been a 16-character random jumble created two years prior. I tried every permutation I could imagine. Then came the dreaded recovery flow: SMS OTP delays, security questions whose answers felt ambiguous after years, and automated account lockout timers. I was completely locked out of my own digital life.

"Human working memory can hold 7 ± 2 items. Demanding that a human remember fifty 16-character random strings across dozens of platforms is not a security policy — it is a neurological impossibility."

The Mental Math System That Started It All

Whenever a new idea struck, I created a new Gmail ID. As the list grew past 20 accounts, writing down passwords felt unsafe, and memorizing 20 random strings was impossible.

I developed a personal mental algorithm: I would take the first 3 characters of the platform (e.g. support → Sup), calculate the cube or square of the letter count (73 = 343), and append a private digit sequence with a special symbol. Passwords like Sup343#852108 were generated deterministically on a phone calculator or in my head.

On that night of 25th December 2025, when a lockout occurred, the core breakthrough struck: "Why do manual arithmetic on a calculator? Can this deterministic mental reasoning be converted into an unbreakable, client-side cryptographic algorithm?"

The Cloud Vault Trap

For years, the tech industry has pushed a single solution: "Just use a cloud password manager." But cloud password vaults (like LastPass, which suffered catastrophic database breaches in 2022) create massive central honeypots. You are forced to upload your encrypted master database to their servers. If their servers are breached or their infrastructure goes down, your digital identity is either exposed or inaccessible.

💡 The 2:00 AM Breakthrough

Sitting in the quiet of that Christmas night, the core question crystallized: What if we never store passwords anywhere? What if passwords weren't static data blobs sitting in a database waiting to be hacked, but mathematical outcomes calculated on-demand?

The Birth of Stateless Deterministic Cryptography

Humans are terrible at memorizing random strings, but exceptional at remembering meaningful natural phrases (like i love reading books).

By feeding a single memorable Master Secret Key together with a Platform Identifier (e.g. gmail.com) into 1,000,000 iterations of PBKDF2-HMAC-SHA512, the browser derives the exact same 16-character, high-entropy password in less than a second — completely offline, with zero server involvement.

Our Permanent Promise

FrankPass was built on that night of 25th December to ensure that no developer, creator, or everyday user ever gets locked out of their accounts again, and no one has to trust a third-party server with their credentials.