browser: randomize **characters** to prevent autocomplete on login