Yes. Passwords are generated entirely in your browser using crypto.getRandomValues(), a cryptographically secure random number generator. Nothing is sent to any server.
Longer passwords with a mix of uppercase, lowercase, numbers, and symbols are harder to crack. We recommend at least 16 characters with all character types enabled.
No. Passwords exist only in your browser memory and are never transmitted or saved. Once you leave the page, they are gone.