You don't have to blindly trust a third party. I have a KeePass which can generate random passwords. I trust that because it's open source, so I could look at

You don't have to blindly trust a third party. I have a KeePass which can generate random passwords. I trust that because it's open source, so I could look at what they're doing--and build it myself--if I wanted. I store the db file in Dropbox, but I don't trust them either: my file is encrypted with both a unique password and a second key file which I've taken pains to only ever transmit by copying on removable media.