crypto.getRandomValues. wordlist is a curated subset of ~1,600 common english words (no ambiguous pairs, no profanity). four words = ~42 bits of entropy — enough to resist brute-force at current compute. five words = ~52 bits = considered strong against serious attackers.