Your password generator is probably using Math.random(). Stop.

Math.random() is not cryptographically secure. Its output is deterministic given the internal state,...