Generate unpredictable, cryptographically strong nonces for CSRF tokens, request IDs, and API signing. All randomness comes from your browser's Web Crypto.
A "number used once" — a random value that should never repeat, used to prevent replay attacks.
Values come from crypto.getRandomValues, suitable for security purposes (not a math PRNG).
No. Generation happens entirely in your browser.