Back to Learn

How deterministic logins work

A practical guide to reproducibility, input accuracy, versions, collision probability, and safe use.

Kardix · KDX2 · Updated June 10, 2026

Deterministic does not mean stored

A deterministic function returns the same output for the same complete input. Kardix derives output locally and does not need a server-side credential record.

Every input matters

Capitalization, spaces, Unicode characters, PIN, and generator version can change the result. KDX2 applies Unicode NFKC normalization.

Why versions matter

Changing Argon2 parameters, normalization, or output rules changes credentials. The version identifier is therefore part of the derivation.

Collision probability

No finite format can promise zero collisions. KDX2 uses a 120-bit username identifier and a strong 24-character password space, making accidental collisions extremely unlikely.

Safe-use checklist