Tria · Deterministic Password Generator von Shahryar Pirooz

Tria is an open-source, private, deterministic password generator that runs entirely in your browser.

Source code: github.com/Shahryar-Pirooz/Tria


Tria generates strong, repeatable passwords from three values:

• Your master secret
• Your username
• The website domain

Instead of storing passwords in a database or synchronizing them through the cloud, Tria derives them when you need them.

The same inputs always produce the same password, so you can regenerate a password without storing it anywhere.


Tria is designed to keep your password inputs local.

• No account required
• No password vault
• No cloud synchronization
• No password database
• No server required
• Your master secret, username, and generated passwords are processed locally in your browser

Nothing needs to be sent to a remote server to generate a password.


Tria uses a cryptographic derivation process:

master secret ── Argon2id ──┐
├── HMAC-SHA-256 ── deterministic password
username + domain ──────────┘


1. Derive — Argon2id transforms the master secret into a cryptographic key.
2. Separate — The normalized username, domain, algorithm version, and revision identify the account.
3. Generate — HMAC-SHA-256 produces deterministic bytes.
4. Format — The resulting bytes are converted into an 18-character password containing uppercase letters, lowercase letters, numbers, and symbols.

The Firefox extension provides the Tria generator directly in Firefox's sidebar.

The domain field can be automatically populated from the active tab's URL. It removes www. and the URL path and keeps the domain synchronized as you navigate or switch tabs until you manually edit it.

Generated passwords are copied to the clipboard and a confirmation notification is displayed.

The extension uses the same password derivation algorithm as the Tria website, allowing passwords generated by the extension and website to remain consistent when the same inputs are used.


The security of Tria depends heavily on the strength and secrecy of your master secret.

Use a long, unique master secret rather than a short PIN or common phrase.

Keep your account identifiers consistent because changing the username or domain produces a different password.

Anyone who knows your master secret and the corresponding account inputs can reproduce your passwords.

If you lose your master secret, you will not be able to regenerate your passwords.

Tria is experimental software and has not been independently audited. Review the source code and use it at your own risk.


Tria is open source. The complete source code is available on GitHub:

View the source code on GitHub

You can inspect the implementation, review the password derivation logic, report issues, and contribute to the project.


Tria uses:

• Argon2id for master-key derivation
• HMAC-SHA-256 for account separation and deterministic generation
• hash-wasm for the Argon2id implementation
• Browser APIs for local extension functionality

Tria does not require a backend service to generate passwords.

Built for people who prefer deriving passwords over storing them.