I talking about failsafe not fallback, U will never reach the condition on browsers or nodejs. This mimic is there just to avoid a null return from .password() (generaly not checked by user) which could be more dangerous.

One more thing, all lib/codes i can find on the net use Math.random() that's why i made this lib. because i use it first :)

I'm curious, why is Math.random() not OK? Does it have a bad seed?

Lol.