Generate strong, random, cryptographically-secure passwords using Web Crypto API.
A strong password should be at least 16 characters long and include uppercase, lowercase, numbers, and special symbols. Avoid dictionary words, names, or sequential patterns.
window.crypto.getRandomValues(), the browser's cryptographically secure random number generator (CSPRNG), not Math.random().