Password Generator

It draws each character from your chosen character sets using crypto.getRandomValues, your browser's cryptographically secure random source, with rejection sampling so there is no statistical bias toward any character. The strength meter shows the result's entropy in bits, and everything happens on your device.

You can set the length anywhere from 6 to 64 with the slider, and toggle lowercase (a to z), uppercase (A to Z), digits (0 to 9), and symbols on or off. There is also a "No look-alikes" option that strips easily confused characters (I, l, 1, O, 0, o) so the password is easier to read and type by hand.

Longer beats fancier. Each extra character multiplies the number of guesses an attacker needs far more than adding one more symbol type does, so a long password from a couple of character sets usually outmatches a short one that uses every set. For anything that matters, 16 characters or more with mixed sets is a solid target, and the bits meter shows you the difference as you slide.

No. Generation runs entirely in your browser with your device's own random number generator, and there is no network request, logging, or storage involved, so the password never leaves the page. You can confirm this by generating with your network disconnected: it still works.

Not in a plain note or a chat to yourself, where anyone with access can read them. Relic keeps everything you copy in an end-to-end encrypted vault, masked by default and readable only by you, so the long random strings you generate here stay both safe and searchable across your devices.