Hash and verify passwords with bcrypt.
Runs in your browser — data never leaves your device
—
bcrypt is standard; still avoid shared screens.
No.
AES-256-GCM with passphrase (WebCrypto).
Generate RSA or ECDSA keypairs (WebCrypto PEM).
Memorable passphrases from EN/JA word lists (CSPRNG).
Generate and verify TOTP codes (RFC 6238).