They promise open source in future, but for now it's just megabytes of JavaScript delivered by their website, much of it generated by emscripten and not human-r

They promise open source in future, but for now it's just megabytes of JavaScript delivered by their website, much of it generated by emscripten and not human-readable. In any case, they're encouraging people to use the website now. Given that encouragement, I'd expect most people to use the dice through the website, even if/when a standalone app becomes available. Even if/when you had the source, this would be orders of magnitude more effort to audit than a simple PRNG-based password generator. KeePass is actually open-source now, and has been audited professionally. You are correct that a full password manager is more complicated than the dice; but the dice don't replace your password manager, so it's an addition to your attack surface, not a replacement. And no, storing your secret outside the the tamper-resistant memory of a security token isn't better than registering a second (or third, or fourth, or however many makes you comfortable) backup token. HSMs and security tokens exist for good reason, and a cleartext backup loses that benefit. I don't see anything wrong with marketing this as a cool toy, and as a tool to teach people how computer security works. I'm disturbed to see this marketed as if it solves a real problem, since that's at best a distraction from the steps (e.g., using a password manager and a hardware security token) that will help people practically.