>I have no idea if the random number generation is sufficient Sure it is, to remain in the same XKCD realm, this works fine: https://xkcd.com/221/ https://xkc

>I have no idea if the random number generation is sufficient Sure it is, to remain in the same XKCD realm, this works fine: https://xkcd.com/221/ https://xkcd.com/221/ More seriously, since you have your "random" numbers in non-fixed position (due to different length of the "random" strings/words and also the number themselves can be 1, 2 or three characters long), even if the built-in algorithm is not "random" enough mathematically, I don't think that it will actually affect password discoverability.