Hash/verify with bcrypt.
Roda no navegador — os dados não saem do seu dispositivo
—
bcrypt is standard; still avoid shared screens.
No.
AES-256-GCM with passphrase.
Generate RSA/ECDSA PEM keys.
EN/JA word passphrases (CSPRNG).
Generate and verify TOTP codes.