How long should a password be?
16 or more random characters is plenty for most accounts. Better yet, use a password manager so every site gets its own password.
Is my data safe?
Yes. Everything runs in your browser. Nothing you paste here is sent to any server.