⚖️ Tool & Cryptographic Architecture Guide

Stateless Generator vs. Random Generator vs. PIN Generator

Discover how deterministic memory calculations, hardware randomness (CSPRNG), and numeric salt isolation differ—and learn exactly which tool to pick for every account, card, and device.

The 3 FrankPass Security Engines at a Glance

Each tool serves a specific security role. None of them store any data on cloud servers.

🔮 Deterministic · 0 Storage

Stateless Password Generator

Derives unique, unhackable passwords mathematically on-demand from your Master Secret Key + Website Name. You never need to save or sync passwords.

  • Engine: PBKDF2 (1M rounds)
  • Memory Model: Zero Storage (RAM only)
  • Output: 16–32 Char Clean Base-32
  • Reproducible: 100% (Any Device)
  • Best For: Gmail, Banks, Social Media
Open Stateless Generator
🎲 Pure CSPRNG · One-Off

Random Password Generator

Creates unpredictable random character sequences using browser hardware entropy (CSPRNG). Cannot be recalculated mathematically; must be saved.

  • Engine: crypto.getRandomValues
  • Memory Model: Save in File/Vault
  • Output: 6–64 Char Custom Pool
  • Reproducible: 0% (One-Time Token)
  • Best For: Wi-Fi, API Keys, Routers
Open Random Generator
🔢 Numeric Salt · 0 Storage

Deterministic PIN Generator

Calculates 4-digit, 6-digit, or 8-digit numeric PINs from your Secret Key with isolated cryptographic salts, ensuring zero overlap with your passwords.

  • Engine: Salted PBKDF2 Digits
  • Memory Model: Zero Storage (RAM only)
  • Output: 4 / 6 / 8 Numeric Digits
  • Reproducible: 100% (Any Device)
  • Best For: ATM, UPI (GPay), mPINs
Open PIN Calculator
🎯 Interactive Decision Wizard

What are you securing right now?

Click your use case below to immediately discover the exact best tool and rationale:

Recommended Tool: FrankPass Stateless Password Generator 0 Storage

Why: You log into everyday websites on multiple phones, laptops, and browsers. A Stateless Generator calculates your password from your memory (1 Secret Key) in 2 seconds. You never have to worry about cloud password vault breaches or forgetting passwords.

⚡ Open Stateless Generator →
Recommended Tool: Deterministic PIN Generator Numeric Pure

Why: Banking portals, UPI apps (PhonePe, Google Pay, Paytm), and ATM cards strictly forbid letters and require 4 or 6 numbers. The PIN Generator uses separate salt isolation so you can use the same Secret Key to calculate unhackable, memorable numeric PINs.

🔢 Open PIN Generator →
Recommended Tool: Random Password Generator (Clean Mode) CSPRNG

Why: Wi-Fi passwords and server API keys are set once and saved permanently inside device hardware or server environment config files. You do not need to re-derive them frequently in your head. CSPRNG gives you maximum unpredictable entropy.

🎲 Open Random Generator →
Recommended Tool: Random Password Generator One-Time Use

Why: For a temporary test account or a service you will discard after 10 minutes, generating a quick throwaway random string avoids using your Master Secret Key.

🎲 Open Random Generator →

Detailed Technical & Cryptographic Comparison

A transparent breakdown of algorithms, memory footprints, entropy, and resilience:

Feature / Metric Stateless Password Gen Random Password Gen Deterministic PIN Gen
Cryptographic Algorithm PBKDF2-HMAC-SHA512 (1,000,000 rounds) Web Crypto API CSPRNG (Hardware Noise) Context-Salted PBKDF2 (1,000,000 rounds)
Required Inputs Platform + Secret Key (+ optional username/counter) None (Select length & pool options) Bank/App Name + Secret Key + PIN Length
Cloud / Server Storage 0 Bytes (Zero Storage) 0 Bytes (Local Only) 0 Bytes (Zero Storage)
Cross-Device Reproducibility 100% Deterministic (Any phone/PC) 0% One-Off (Cannot re-derive) 100% Deterministic (Any phone/PC)
Need to Save Credentials? No (Remember 1 Secret Key) Yes (Must Save in Vault/File) No (Remember 1 Secret Key)
Character Pool Golden Base-32 (32 chars) / Full ASCII Clean 32 / Full Alphanumeric / Symbols Pure Numeric Digits (0–9)
Default Length / Output 16 to 32 Characters 6 to 64 Characters 4, 6, or 8 Digits
Lookalike Glyphs Filtered? Yes (Zero O/0, I/1, S/5 confusion) Yes (In Clean Mode) Yes (Only standard numbers 0-9)
If you forget/lose the credential Re-enter inputs → Instant Recovery Lost permanently unless backed up Re-enter inputs → Instant Recovery
Offline PWA Execution 100% Offline (Local Browser) 100% Offline (Local Browser) 100% Offline (Local Browser)
Primary Role Daily Accounts, Email, Banking Portals Wi-Fi Routers, Server Secrets, API Keys ATM Cards, UPI (GPay/PhonePe), mPINs

Deep-Dive: The Philosophy Behind Each Tool

🔮 Tool 1: Stateless Password Generator

Why Stateless Cryptography Beats Centralized Cloud Password Vaults

Traditional password managers store all your passwords in a single encrypted database on their cloud servers. If their servers are breached, or if you forget your master vault password, you face catastrophic lockouts.

FrankPass replaces database storage with deterministic client-side mathematics. By feeding the website name, your Master Secret Key, and a rotation number through 1,000,000 PBKDF2-HMAC-SHA512 rounds, FrankPass calculates the exact same cryptographic key every time. It exists in browser RAM for a few milliseconds, gets copied to your clipboard, and vanishes with 0 trace.

🎲 Tool 2: Random Password Generator

When True Non-Deterministic Randomness is the Right Choice

Sometimes you do not need to remember a password in your head. For example, your home Wi-Fi network password, a database connection string in a backend .env file, or an AWS API secret key is configured once on a server and rarely typed by humans.

For these machine-to-machine credentials, the Random Password Generator pulls true cryptographic entropy from your operating system via crypto.getRandomValues(). Furthermore, FrankPass's Clean Mode eliminates lookalike characters (like capital O and number 0), preventing errors when typing complex Wi-Fi passwords on smart TVs or IoT devices.

🔢 Tool 3: Deterministic PIN Generator

How the PIN Generator Keeps Your Secret Key 100% Safe

Debit cards, UPI applications (Google Pay, PhonePe, Paytm), and mobile SIM cards do not accept 16-character alphanumeric passwords—they require a 4-digit or 6-digit numeric PIN.

You can safely use the exact same Master Secret Key for both your passwords and your PINs. FrankPass uses Cryptographic Salt Isolation (frankpass-pin-v1). The derived numbers have zero mathematical correlation with your website passwords. Even if an attacker learns your 4-digit ATM PIN, it is mathematically impossible to reverse-engineer your Master Secret Key or guess your Gmail password.

⚡ Golden Rules of Thumb: Which Tool When?

Keep this simple 3-step cheat sheet in mind:

1. Human Logins → Use Stateless Password Generator

If you need to log into an account across different phones, tablets, or computers—use the Stateless Generator. You only remember your Secret Key.

2. Machine Secrets & Wi-Fi → Use Random Password Generator

If a credential will be saved once into a server file, router firmware, or disposable test account—use the Random Generator (Clean Mode).

3. Numeric Only (ATM / UPI) → Use Deterministic PIN Generator

If a system only accepts digits (4-digit ATM card, 6-digit GPay/PhonePe UPI mPIN)—use the PIN Generator with your Secret Key.

Frequently Asked Questions

Clarifying key questions regarding cryptography, secret key sharing, and offline privacy.

What is the main difference between Stateless and Random generators?
A Stateless Generator uses deterministic mathematics (1,000,000 PBKDF2 rounds) to calculate your password from your Secret Key on-demand, requiring 0 bytes of storage. A Random Password Generator uses hardware noise (CSPRNG) to create an unpredictable string that cannot be recalculated and must be saved in an external file or vault.
Can I use the exact same Secret Key for both the Password and PIN generators?
Yes! FrankPass applies distinct cryptographic context salts (frankpass-web-v1 vs frankpass-pin-v1). Even if you type the exact same Secret Key, your numeric ATM PIN has zero mathematical relationship with your website passwords.
Do any of these tools transmit my inputs or keys over the internet?
No, absolutely not. All computations occur 100% locally inside your browser's RAM using the native Web Cryptography API. You can turn off your Wi-Fi or enable Airplane Mode, and all three tools will function identically offline.
What happens if I forget my password with each tool?
With the Stateless Generator and PIN Generator, you can never lose your credential: simply type the website name and your memorable Secret Key again to instantly re-derive the exact same password. With the Random Password Generator, if you lose the string, it is mathematically irrecoverable because it was generated from random noise.
Why does FrankPass recommend Golden Base-32 Clean Mode?
Standard random generators include confusing lookalike glyphs (such as capital O vs number 0, or lowercase l vs number 1). FrankPass Clean Mode restricts the character pool to an exact 32-character set (ADEFHLMNRT defhmt 2346789 @#$%&*+=?), guaranteeing zero visual confusion on mobile screens while maintaining strict 80-bit NIST entropy.

Ready to Secure Your Digital Life?

Pick the right generator for your task—100% free, 100% offline, zero cloud tracking.

🔮 Stateless Generator 🎲 Random Generator 🔢 PIN Generator