Building a Cryptographically Secure Password Generator in the Browser: CSPRNG, Entropy Bits, and Character Set Design

Most password generator tutorials use Math.random(). That is wrong for security-sensitive code. Math.random() is a pseudorandom number generator (PRNG) -- fast, reproducible, and predictable given enough output samples. A password generator needs a c...