⚡ Generators

Generators produce something from nothing — a value, a document, a block of filler. What separates a good generator from a careless one is usually the quality of its randomness or the completeness of its output, neither of which is visible from the result alone.

Randomness has to be cryptographic

For anything security-related, the source matters more than the format. The password generator draws from your browser's crypto.getRandomValues, a cryptographically secure source. This is not a technicality: Math.random() is a fast pseudo-random generator whose output can be predicted from previous values. It is fine for shuffling a carousel and unfit for generating a secret, so any password tool built on it produces guessable passwords.

On password strength itself, length beats complexity. Entropy grows faster with length than with character variety, so a 16-character lowercase password is stronger than an 8-character one using every symbol available. Current NIST guidance favours length, screening against breached-password lists, and not forcing periodic rotation — rotation pushes people towards predictable variations.

Placeholder text needs discipline

Lorem Ipsum works precisely because it is meaningless, keeping reviewers focused on layout rather than copy. Two cautions. Latin word-length distributions differ from English, so a design that looks balanced in Lorem Ipsum can break with real content. And placeholder text has a habit of surviving to production, where it is a strong signal to a search engine that a page is unfinished. Search your own site for it before launch.

Documents are commitments

A quotation is a firm price for a defined scope and generally forms a contract once accepted; an estimate is an approximation; an invoice demands payment for work delivered. Being explicit about which you are issuing prevents arguments later about whether a figure was binding.