Generate strong random passwords using your browser's crypto-secure random number generator. Nothing is sent to any server.
This generator uses window.crypto.getRandomValues(), the browser's cryptographically secure
random source — the same category of randomness PHP's random_bytes() provides on the server.
Avoid password generators (and auth tokens) built on Math.random() or PHP's rand()/
mt_rand(), since those aren't safe against attackers trying to predict the output.