On top of that, I find taking a shell and running `pwgen 24` much easier and faster. It even generates a couple of passwords if need a few. And can be piped into things like ssh sessions for automation.

And yes, our recommended way is to have the secret management automatically generate the password. That way, not even your workstation touches it.