How this generator works
Passwords are generated using crypto.getRandomValues, the Web Crypto API's
cryptographically secure random number source, not Math.random, which is
not safe for security-sensitive values. Nothing is transmitted or stored anywhere.