Change access domain to supergenpass.s3.amazonaws.com (for transparency).
More concise bookmarklet; include baked version in comment.
Clean up try/catch statements.
Prevent default for click actions.
Resolution to issue #3 was NOT correct; hardcode password length maximums.