The secret generated via a website can also be *stored* by that website, meaning.. your "secret" isn't secret, it's known to you and whatever entity generated it. Depending on your content, that might be acceptable, or it might not. Only you can determine that.