Looks like you didn&#x27;t understand the sadness of the issue I was reporting. The author of the software constructed his own random number generator from two primitives: Salsa20 stream generator and Math.random. The last part is what makes this PRNG theoretically insecure: because Math.random is not guaranteed to give cryptographically secure random numbers, thus, theoretically, the generated passwords can be guessed. (The fact that there are no current attacks on current implementations of Math.random in browsers doesn&#x27;t mean that we won&#x27;t get them in the future.) The secure alternative to author&#x27;s PRNG is ~one line of code: window.crypto.getRandomBytes. There are no tradeoffs involved! On the contrary, the author&#x27;s insecure construction is more difficult to write than the secure one.<p>(BTW, while we here argue about security experts, the author said &quot;Thank you, I&#x27;ll replace it of course.&quot;)