Pick character classes and optional custom symbols. Length must be at least the number of selected classes so each can appear once.
Used only when Symbols is checked; remove confusing characters if you like.
Uses crypto.getRandomValues; passwords stay in your browser and are never uploaded.