Create strong random passwords of 8 to 64 characters.
Choose a length and character types, then generate. Passwords are made on your device with the browser's cryptographic random generator and are never sent anywhere.
Use at least 14 to 16 characters and a different password for every account. A password manager makes that practical.
Yes. They come from the browser's crypto.getRandomValues function, which is designed for security use.