https://blog.margrop.net/en/tag/password-manager/ Recent content in Password Manager on Margrop Blog Hugo -- gohugo.io en-US Wed, 29 Jul 2026 20:30:00 +0800 https://blog.margrop.net/en/post/password-manager-master-password-encrypted-vault-math/ Wed, 29 Jul 2026 20:30:00 +0800 https://blog.margrop.net/en/post/password-manager-master-password-encrypted-vault-math/ The short answer A well-designed password manager does not merely remember a readable spreadsheet of your passwords. It stores an encrypted vault. Your master password is not normally used as the raw encryption key for every item. Instead, your device sends it through a deliberately expensive key derivation function, obtains derived key material, unlocks a randomly generated vault key, and decrypts your records locally. The server mainly stores and synchronizes ciphertext.