I built an AI tool to recover passwords
Hi HN, I built aiipassword.com, a small tool for one specific problem: getting back into your own accounts when you no longer have access to the linked email or phone.
How it works, simply: the site asks short, memory‑based questions about habits and patterns you use for passwords (name cues, dates, favorite numbers, job hints, common symbols). An AI model uses those answers and learned human password patterns to generate a short list of likely passwords you might actually have used. I used the list to try plausible combos until one worked.
Privacy and limits: nothing you type is stored long‑term. Inputs are processed transiently and never used for training. The tool is strictly for recovering your own accounts. Do not use it on other people’s accounts.
Threat model and safety: this is a last‑resort recovery aid, not a replacement for proper account recovery, 2FA, or password managers. I want the community to critique the security model, suggest attacks I missed, and help me close gaps.
If you’re a security researcher or HN reader with notes on cryptography, privacy, or ethical concerns, I’d love your feedback. Links, tests, and honest critiques welcome. > Privacy and limits: nothing you type is stored long‑term. Inputs are processed transiently and never used for training. The tool is strictly for recovering your own accounts. Do not use it on other people’s accounts. I'd be very worried it's false. Sorry, but I'd never use it. Hey, totally get why you'd be careful
Basically, the tool doesn't even know what account you're trying to get into (like your Gmail, Instagram, whatever). It never asks for the email or phone number tied to that account.
The hints you give like names, dates, job stuff? They're only used right then while the AI is thinking and as soon as it spits out the password ideas, poof that info is gone. We don't save it anywhere.
The only things we keep are your login details for our site and how many credits you have left. That's it.
Seriously, we built it this way so your info stays yours.
Hope that helps clear it up!