NordPass

Promptfree, for everyone, and the only version there is

Copy the prompt for Claude CodeCopy the prompt for CodexCopy the prompt for Cursor

Copy

Do not build this. It holds every account you own, and the failure mode is not a bug.

The cryptography here has been reviewed by people who do it for a living. Writing your own is a decision to put your whole identity behind code nobody has looked at.

WHAT TO DO INSTEAD
- Keep it, or move to Bitwarden — open source, audited, cheaper, and self-hostable if you want the data on your own machines
- **Check the renewal price.** This category advertises a low monthly figure on a multi-year term and renews at several times it. Look at what you will actually be charged next time, not what you paid

WHAT YOU CAN BUILD, AND SHOULD
An auditor over your own vault, from the manager's export or command-line tool. Local, no server, nothing kept:
- Reused passwords, ranked by how much each account matters
- Weak ones by entropy, and any appearing in a breach corpus — checked with k-anonymity, so only a hash prefix leaves your machine and the password never does
- Accounts with no second factor where the service supports one
- Entries whose domain no longer resolves or now redirects elsewhere: a login for a company that was acquired is a login on somebody else's system
- A short quarterly report you act on, and the export deleted by the script rather than by you remembering

THE THING NOBODY TESTS
Rehearse recovery. If your phone and laptop both vanished today, could you get back in? Most people have never checked, and that answer decides whether the manager is protecting you or holding your life hostage. Test it once and keep the result somewhere physical.

THE ONE-LINE VERSION
Never write the crypto. Write the auditor, check the renewal price, and go and test your recovery.