Method and assumptions
Create 122 random bits with the browser's cryptographic generator, set the required version and variant bits, and format each value as an RFC 9562 UUID version 4. Generation happens only on the current device and results are not stored or sent to our server. UUIDs make collisions extremely unlikely, but they are public identifiers rather than passwords, session tokens, or API keys.