hipstapas.dev: Hipster Password/UUID/WordList Software as a Service

Hello PH! 👋 I love to automate repetative tasks and standardise processes with the help of software. I do believe that creation of strong phrases, ids, and so on should be secure, transparent and reliable. That is why I build Hipstapas - to have online single source of strong phrases (which I already do use - dogfooding :-). It will surely take time, to trust online services that deliver such sensitive data as passwords and ids. That is why the service is open source - to be transparent from the beginning. Nevertheless it seems to me that more an more (micro) services will emerge and replace a lot of the "classic" software that we are used to and accustomed to have offline. What if the service logs the created passwords? The API is deployed from GitHub directly (main branch), so the code in GitHub is what is online. There is no logging, no tracking, nothing at all. The idea is to build trust with the users - I hope I resp. the product can do that, because everyone can check that nothing is logged. I am also open anytime for security reviews of the vercel project if desired (there are no log sinks configured, not even for statistics). And even if something is logged, IMO it is impossible to correlate the generated phrase with the service, web address (ip), username and password/uuid/wordlist, Use cases that I can think of: 🔹 resetting/rotating passwords automatically 🔹 creating secrets, that only the client should now - password managers and the like 🔹 adaptation for internal us (self-host or npm package - on its way) 🔹 custom preconfigured generation schema/rules The service itself is a REST API build with pure JavaScript (on top of node.js). It concists currently of 3 endpoints (FAAS) hosted on vercel (formerly zeit). There is also an interactive playground build with Bootstrap/HTML/JavaScript. Custom policy features is also on its way. Let me know if you have any questions. I can't wait to hear what you think!