It's made in your browser using secure randomness. Nothing is sent anywhere.
—
Send it securely (one-time link)
Create a link that shows the password once, then destroys it forever. The password is encrypted in your browser first.
With a PIN, the link alone isn't enough — tell the person the PIN a different way (text/call). Even we couldn't read it.
Link created. It works once, then the secret is gone. It also auto-expires in 7 days if unopened.
The one-time link needs the small free server set up first (see worker/README.md). The password generator above works without it.
All of this happens in your browser. The password generator sends nothing. The one-time link stores only an encrypted blob; the key stays in the link, so the server can never read your password.