- Are these passwords actually random?
- Yes — they're generated using the Web Crypto API's getRandomValues(), the same cryptographically secure randomness source browsers use for security-sensitive operations, not a weaker Math.random().
- Is the password sent anywhere or logged?
- No. It's generated and displayed entirely in your browser and never transmitted over the network.
- What length should I use?
- 16+ characters with uppercase, numbers, and symbols enabled is a reasonable default for most accounts; use 20+ for anything sensitive like a password manager's master password.
- Can I generate multiple passwords?
- Yes — click "Generate new password" as many times as you like.