A password management system for reconstructing a password for accessing a password-protected resource, the password management system comprising: - a client device comprising: - a client-side communication interface configured to: - receive an authentication input from a user of the client device, and - send, to a server device of the password management system, application information indicating the password-protected resource for which password reconstruction is requested; and - a client-side processor system configured to: - apply a non-invertible deterministic function to the authentication input to obtain a protected authentication input; - the server device comprising: - a database storage configured to store a database comprising stored password factors for corresponding protected authentication inputs, wherein a same user-based password component is obtained from each of the stored password factors and the corresponding protected authentication input; - a server-side communication interface configured to: - receive, from the client device, the application information, and - retrieve, from the database, the stored password factor corresponding to the protected authentication input; and - a server-side processor system configured to: - compute an application-based password component from the application information; wherein the client-side processor system or the server-side processor system is further configured to reconstruct a password by: - calculating a user-based password component by combining the retrieved stored password factor and the protected authentication input using an invertible, deterministic function; and - combining the user-based password component and the application-based password component to generate the password. - a client device comprising: - a client-side communication interface configured to: - receive an authentication input from a user of the client device, and - send, to a server device of the password management system, application information indicating the password-protected resource for which password reconstruction is requested; and - a client-side processor system configured to: - apply a non-invertible deterministic function to the authentication input to obtain a protected authentication input; - a client-side communication interface configured to: - receive an authentication input from a user of the client device, and - send, to a server device of the password management system, application information indicating the password-protected resource for which password reconstruction is requested; and - receive an authentication input from a user of the client device, and - send, to a server device of the password management system, application information indicating the password-protected resource for which password reconstruction is requested; and - a client-side processor system configured to: - apply a non-invertible deterministic function to the authentication input to obtain a protected authentication input; - apply a non-invertible deterministic function to the authentication input to obtain a protected authentication input; - the server device comprising: - a database storage configured to store a database comprising stored password factors for corresponding protected authentication inputs, wherein a same user-based password component is obtained from each of the stored password factors and the corresponding protected authentication input; - a server-side communication interface configured to: - receive, from the client device, the application information, and - retrieve, from the database, the stored password factor corresponding to the protected authentication input; and - a server-side processor system configured to: - compute an application-based password component from the application information; wherein the client-side processor system or the server-side processor system is further configured to reconstruct a password by: - calculating a user-based password component by combining the retrieved stored password factor and the protected authentication input using an invertible, deterministic function; and - combining the user-based password component and the application-based password component to generate the password. - a database storage configured to store a database comprising stored password factors for corresponding protected authentication inputs, wherein a same user-based password component is obtained from each of the stored password factors and the corresponding protected authentication input; - a server-side communication interface configured to: - receive, from the client device, the application information, and - retrieve, from the database, the stored password factor corresponding to the protected authentication input; and - receive, from the client device, the application information, and - retrieve, from the database, the stored password factor corresponding to the protected authentication input; and - a server-side processor system configured to: - compute an application-based password component from the application information; - compute an application-based password component from the application information; - calculating a user-based password component by combining the retrieved stored password factor and the protected authentication input using an invertible, deterministic function; and - combining the user-based password component and the application-based password component to generate the password.