#randomness

We checked what RNG popular password generators actually use — some use Math.random()

LastPass and 1Password's own free web password generators call JavaScript's Math.random() instead of the cryptographically secure crypto.getRandomValues() — verified by instrumenting the page, not guessing. Here's what that does and doesn't mean.