Keylime CLI
Strong secrets and passphrases, generated right in the terminal as keylime or just kl. A full Python translation of PokaTools' browser Keylime, rebuilt from scratch on the standard library and the operating system's own randomness.
WHAT IT DOES
Three generators
random for random-character passwords, memorable for word passphrases, secret for encoded secrets: hex, Base32/58/62/64, UUID v4, Z85, API keys, and more.
A real l33t engine
Passphrase substitutions at basic, extended, full or custom levels, a per-word count, and a --max-len that regenerates instead of trimming. Entropy is only credited where it's provable.
Built-in presets
Run a policy by name: kl bw, xkcd, wifi, pin, shell-safe, leet, dev and more. Presets ignore your saved settings, so they mean the same on every machine. Save, shadow, export and import your own.
REPL & settings editor
Run kl with no arguments to drop into an interactive session, or kl settings for a full-screen editor with a live sample and strength bar. Edits stay staged until you save.
Private clipboard
A single result auto-copies on an interactive terminal. On Windows it's kept out of Win+V history and cloud sync, and values are never passed on a command line.
Local & scriptable
Generation never touches the network. Pipes get clean stdout, plus --json, --quiet and an entropy estimate on stderr.
COMMANDS
Every generator takes --count N, -c/--copy, -C/--no-copy, --json, --quiet, --entropy, and --preset NAME.
Python 3.11+ with no third-party dependencies. Randomness comes from the OS through Python's secrets module. No server, no account, and nothing generated is ever written to disk or logged. The only network calls are the explicit update-words download and an optional update check (ui.update_check), which sends nothing but the version.