Cryptographically random passwords.
Humans create predictable passwords. Random generation using crypto APIs is much stronger.
Yes — generated locally in your browser using crypto.getRandomValues(). Nothing sent to any server.