Password security guide

Passwörter ohne Smartphone verwalten

A smartphone is convenient, but it is not required for unique passwords, two-factor authentication, or reliable account recovery.

Published June 12, 2026 · Updated June 12, 2026 · 4 min read

Your main options

You can use a desktop password manager, a local encrypted vault, a hardware security key, a dedicated authenticator device, printed recovery codes, or a deterministic generator on a trusted computer. The best setup depends on whether you need synchronization, sharing, autofill, and emergency recovery.

Desktop password managers

A desktop manager can create and store unique random credentials, fill websites, and keep notes or recovery codes. Some products offer cloud synchronization, while local-vault programs keep the database file under your control.

Without a phone, ensure you can access the vault after a computer failure. Maintain encrypted backups and know the master password. If cloud sync is enabled, protect the account with a security key or another non-phone second factor.

Two-factor authentication without a phone

Hardware security keys are one of the strongest options for supported services. Keep a spare key in a separate safe place. Some desktop applications can generate time-based one-time codes, but storing the password and second factor in the same vault reduces separation.

Many services provide one-time recovery codes. Print them or store them in a secure physical location. SMS is not the only two-factor option, and often it is not the strongest one.

Using deterministic generation

A tool such as Kardix can recreate selected login details from a phrase, optional PIN, label, and version. It requires no phone account or cloud vault. It can be useful on a trusted desktop, but it offers no recovery and no automatic sharing.

Do not use a public library or workplace computer for your master phrase. Local generation cannot protect against keyloggers or screen monitoring.

Example setup

A practical no-smartphone setup might use a local desktop vault for most accounts, two hardware security keys for important services, printed recovery codes in a locked location, and an encrypted vault backup on a separate drive. Kardix could be used for a limited set of accounts where repeatable generation is helpful.

Plan for computer loss

  1. Keep at least two tested backups.
  2. Store one backup away from the primary computer.
  3. Document how to restore the vault application.
  4. Keep recovery codes and spare security keys separate.
  5. Know which email account controls password resets.

Summary

You can maintain strong account security without a smartphone. The key is replacing phone convenience with deliberate backups, hardware authentication, trusted desktop software, and a tested recovery plan. Avoid making one computer or one remembered secret the only point of access.

Try the Kardix generator

Generate login details locally from your private phrase, optional PIN, and a consistent account label. Nothing is saved by Kardix.

Kardix-Generator öffnen →