Pick the length and character set, then generate. Strings are produced with crypto.getRandomValues() so they are safe for cryptographic use.
Yes — they use the browser Web Crypto API rather than Math.random(), making them suitable for salts and tokens.
Yes — select from letters, digits and symbols, or restrict to hex or alphanumeric only.
Salts, API keys, nonces, one-off passwords, unique IDs and randomized test fixtures.