kp-rescue

Recovery server initialization

Set the transformed password, tune the challenge, and upload the KDBX. Afterwards any new browser will see the challenge directly at /.

Secret and challenge

Base password

Show password Maximum security: do not show characters or length while typing Challenge preset

Encoding Virtual length Class count Question count

No control characters No ambiguous characters

Adjust target duration, level, and traffic scenario here. Local calibration is shared by both PoW steps.

Show raw seconds

Using an orientative browser benchmark until you run calibration.

Light Medium Hard Extreme Same IP (%) Multi IP (%) Same IP hits Multi IP hits

Target time (s) Level Scenario

PBKDF2 cost Counter minimum Counter maximum Prefix bytes

Estimated start time: -

Target time (s) Level Scenario

PBKDF2 cost Counter minimum Counter maximum Prefix bytes

Estimated verify time: -

Encryption Algorithm Key Derivation Function Transform rounds / time cost Memory Usage (MiB) Parallelism KDBX version

When the KDBX is uploaded, the header will be parsed to fill these fields.

KDBX file

The full password only lives in this browser during record derivation. The server receives the derived record and the KDBX.