Generates passwords using your browser's cryptographic random number generator (crypto.getRandomValues). Nothing is logged, stored, or sent over the network.
Character selection uses rejection sampling against crypto.getRandomValues rather than a plain modulo, so every character in the chosen set has an equal chance of appearing — no bias toward the start of the alphabet.
The strength estimate is a straightforward entropy calculation — length × log2(character set size) — a reasonable guide, not a guarantee. A long, unique, randomly generated password is what matters most; reuse is what actually gets accounts compromised.