Practical password security: strong generation with CSPRNG, passphrases, managers, MFA, and what browser tools can safely help with.