Smart Passwords Library for Kotlin
Cryptographic password generation and management without storage. Cross-platform deterministic passwords for JVM and Android.
Smart Passwords Library: Cryptographic password generation and management without storage. Generate passwords from secrets, verify knowledge without exposure, manage metadata securely.
Now with Cross-Platform Determinism: Same secret + same parameters = identical password on Kotlin, C#, Python, Go, JavaScript and any language with SHA-256.
Decentralized by Design: Unlike traditional password managers that store encrypted vaults on central servers, smartpasslib stores nothing. Your secrets never leave your device. Passwords are regenerated on-demand — no cloud, no database, no trust required.
JVM/Android Ready — Works on any Kotlin platform.
⚠️ Breaking Change (v4.0.0)
This version is NOT backward compatible with v1.x.x. Passwords generated with older versions cannot be regenerated with v4.0.0.
📖 Full migration instructions → see MIGRATION.md
Validation Rules: Secret phrase: min 12 chars · Password length: 12-100 chars · Code: 4-100 chars
Key derivation (same as Python/JS/Go/C# versions v4.0.0):
| Key Type | Iterations | Purpose |
|---|---|---|
| Private Key | 15-30 (dynamic) | Password generation (never stored, never transmitted) |
| Public Key | 45-60 (dynamic) | Verification (stored locally) |
Character Set:
!@#$%^&*()_+-=[]{};:,.<>?/ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789abcdefghijklmnopqrstuvwxyz
Decentralized Architecture:
Copy SmartPassLib.kt to your project.
Generate Smart Password:
import com.smartlegionlab.smartpasslib.SmartPassLib
fun main() {
val secret = "MyStrongSecretPhrase2026!"
val length = 16
val password = SmartPassLib.generateSmartPassword(secret, length)
println(password)
}
Generate Public/Private Keys:
val secret = "MyStrongSecretPhrase2026!"
val publicKey = SmartPassLib.generatePublicKey(secret)
val privateKey = SmartPassLib.generatePrivateKey(secret)
println("Public Key (store locally): $publicKey")
println("Private Key (never store): $privateKey")
Verify Secret Against Public Key:
val secret = "MyStrongSecretPhrase2026!"
val storedPublicKey = "..." // from local
val isValid = SmartPassLib.verifySecret(secret, storedPublicKey)
if (isValid) {
val password = SmartPassLib.generateSmartPassword(secret, 16)
}
Generate Random Passwords:
// Strong random (cryptographically secure) val strong = SmartPassLib.generateStrongPassword(20) // Base random val base = SmartPassLib.generateBasePassword(16) // Authentication code (4-100 chars) val code = SmartPassLib.generateCode(8)
Properties:
| Property | Type | Description |
|---|---|---|
VERSION | String | Library version (4.0.0) |
CHARS | String | Character set used for generation |
Methods:
| Method | Parameters | Returns | Description |
|---|---|---|---|
generatePrivateKey(secret) | secret: String | String | Private key (15-30 iterations) |
generatePublicKey(secret) | secret: String | String | Public key (45-60 iterations) |
verifySecret(secret, publicKey) | secret, publicKey | Boolean | Verify secret matches public key |
generateSmartPassword(secret, length) | secret, length | String | Deterministic password |
generateStrongPassword(length) | length | String | Cryptographically random |
generateBasePassword(length) | length | String | Simple random password |
generateCode(length) | length | String | Short code (4-100 chars) |
Input Validation:
| Parameter | Minimum | Maximum |
|---|---|---|
| Secret phrase | 12 chars | unlimited |
| Password length | 12 chars | 100 chars |
| Code length | 4 chars | 100 chars |
Secret Phrase Requirements:
Strong Secret Examples:
✅ "MyStrongSecretPhrase2026!" — mixed case + numbers + symbols ✅ "P@ssw0rd!LongSecret" — special chars + numbers + length ✅ "GitHubPersonal2026!" — description + extra chars
Weak Secret Examples (avoid):
❌ "short" — too short, raises exception ❌ "GitHub Account" — using description as secret (weak!) ❌ "password" — dictionary word, too short ❌ "1234567890" — only digits, too short
Decentralized Nature:
There is no "forgot password" button. This is by design:
This is the price of true decentralization — you are completely in control.
Same deterministic algorithm is available in multiple languages:
Run the test script:
kotlin test.kts
By using this software, you agree to the full disclaimer terms.
Software provided "AS IS" without warranty. You assume all risks.
Full legal disclaimer: See DISCLAIMER.md
License: BSD 3-Clause License