Random strings using the browser crypto.getRandomValues API. Nothing is sent to the network.
Use it when setting up or rotating credentials. A mix of length and character types improves resistance to guessing and dictionary attacks. And one simple rule: a password that has been through someone else's server is no longer entirely yours. These are generated in your own browser and are never sent, stored or logged anywhere; you can verify it by loading the page and going offline before generating them.
Generation and copy happen only on your device. Gestycontrol does not store or reuse the password.
—
On shared machines, clear the clipboard after use, or avoid copying highly sensitive passphrases to it.