--- title: HIPPO Turns One Master Password Into Many Without... description: HIPPO (Hidden-Password Online Password) is a storeless password manager implemented as a browser extension that derives site-specific passwords on the fly from... canonical: https://daily.dev/posts/hippo-turns-one-master-password-into-many-without-storing-any-d8lyvljr7 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: HIPPO Turns One Master Password Into Many Without Storing Any | daily.dev og:description: HIPPO (Hidden-Password Online Password) is a storeless password manager implemented as a browser extension that derives site-specific passwords on the fly from... og:url: https://daily.dev/posts/hippo-turns-one-master-password-into-many-without-storing-any-d8lyvljr7 og:image: https://api.daily.dev/og/posts/D8LYvLJr7.png og:image:alt: HIPPO Turns One Master Password Into Many Without Storing Any og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # HIPPO Turns One Master Password Into Many Without Storing Any **[IEEE Spectrum](https://daily.dev/sources/ieeespectrum)** · 5 min read · 1 upvotes · 1 comments ## Summary HIPPO (Hidden-Password Online Password) is a storeless password manager implemented as a browser extension that derives site-specific passwords on the fly from a single master password using an oblivious pseudorandom function (OPRF). Neither the master password nor derived passwords are ever stored locally or on a server. A small user study (25 participants) found HIPPO scored significantly higher than traditional manual password entry on perceived security (4.04 vs 3.09 out of 5) and trust (4.00 vs 3.30), and was also rated easier to use despite requiring an extra activation step. The researchers plan follow-up studies covering longer-term usage, master password change scenarios, and account lockout risks. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community discussion Top comments from developers on daily.dev. **@o251298** · 0 upvotes > Cool idea, I like the no-storage approach ## Similar posts on daily.dev - [Password Manager Angst](https://daily.dev/posts/password-manager-angst-w4rigdniz) · ongoing by Tim Bray · 1 upvotes · 0 comments - [I ditched Chrome's password manager for this open-source app and I'm never going back](https://daily.dev/posts/i-ditched-chrome-s-password-manager-for-this-open-source-app-and-i-m-never-going-back-supnmjamj) · XDA Developers · 0 upvotes · 0 comments - [HIBP Mega Update: Passkeys, k-Anonymity Searches, Massive Speed Enhancements and a Bulk Domain Verification API](https://daily.dev/posts/hibp-mega-update-passkeys-k-anonymity-searches-massive-speed-enhancements-and-a-bulk-domain-verif-jeu2cnjwf) · Troy Hunt · 1 upvotes · 0 comments - [Most data breaches start with a stolen password. Here’s how to fix that](https://daily.dev/posts/most-data-breaches-start-with-a-stolen-password-here-s-how-to-fix-that-p4zpfmmei) · The Next Web · 0 upvotes · 0 comments --- Tags: [#devtools](https://daily.dev/tags/devtools), [#authentication](https://daily.dev/tags/authentication), [#cryptography](https://daily.dev/tags/cryptography) [View this post on daily.dev](https://daily.dev/posts/hippo-turns-one-master-password-into-many-without-storing-any-d8lyvljr7) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"HIPPO Turns One Master Password Into Many Without Storing Any","url":"https://daily.dev/posts/hippo-turns-one-master-password-into-many-without-storing-any-d8lyvljr7","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/hippo-turns-one-master-password-into-many-without-storing-any-d8lyvljr7"},"datePublished":"2026-04-20T13:19:08.495Z","dateModified":"2026-04-20T13:26:38.358Z","description":"HIPPO (Hidden-Password Online Password) is a storeless password manager implemented as a browser extension that derives site-specific passwords on the fly from...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c0a2e5df8d581f31f839c853bd6bef74?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c0a2e5df8d581f31f839c853bd6bef74?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"IEEE Spectrum","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"IEEE Spectrum","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/b123f5e8420e492ab36f6adb30c1793a","url":"https://daily.dev/sources/ieeespectrum"},"commentCount":1,"discussionUrl":"https://daily.dev/posts/hippo-turns-one-master-password-into-many-without-storing-any-d8lyvljr7","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":1}],"keywords":"devtools,authentication,cryptography","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"IEEE Spectrum","item":"https://daily.dev/sources/ieeespectrum"},{"@type":"ListItem","position":3,"name":"HIPPO Turns One Master Password Into Many Without Storing Any"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/hippo-turns-one-master-password-into-many-without-storing-any-d8lyvljr7","comment":[{"@type":"Comment","text":"Cool idea, I like the no-storage approach","datePublished":"2026-04-21T20:56:19.482Z","url":"https://daily.dev/posts/D8LYvLJr7#c-qgC8xChjn","author":{"@type":"Person","name":"Oleh","url":"https://daily.dev/o251298","image":"https://lh3.googleusercontent.com/a/ACg8ocKQXFMQWYGhqK0zjemGmpp09_D7lMQvbus1ZNZkT9UUSiTV=s96-c"}}]} ```