Nothing upon my sleeve in-browser XKCD password generator (unofficial).

Lightweight, no JS dependencies, based on Web Crypto API and EFF word list.

Don't trust, add view-source: before URL and check, its well commented.

For more secure operation, use incognito mode to disable extensions.