Essentially, that's a call to Math.random() 16 times that picks from a pool of 62 characters each time, allowing for 62^16 possible combinations, or 4.7 * 10^28

Essentially, that's a call to Math.random() 16 times that picks from a pool of 62 characters each time, allowing for 62^16 possible combinations, or 4.7 * 10^28 possibilities. You've made me aware that this could possibly make brute forcing easier, as it is nearly equivalent to a 96-bit key length. While even a brute-forcing 96-bit key would theoretically take about 230 million years on today's top-of-the-line hardware and therefore is not (currently) insecure, it does not make sense to introduce that weak point. Therefore, I've updated the current random passwords to be 24 characters in length from now on, which pushes it far above 2^128. https://github.com/STRML/securesha.re-client/commit/d5228650226e38f234a352fde7ff54a2cfa1f400 https://github.com/STRML/securesha.re-client/commit/d5228650...