Let me start with a question: If you needed a strong password, would you ask AI to generate one for you?<\/p>\n
It sounds reasonable enough.<\/p>\n
Tools like ChatGPT and Copilot can write reports, draft emails and even create bits of code. Asking them for a 16-character password packed with symbols and numbers feels like a smart shortcut.<\/p>\n
But you might want to rethink that.<\/p>\n
Researchers recently tested AI tools by asking them to generate secure passwords.<\/p>\n
On the surface, the results looked great. Long strings of mixed-case letters, numbers and symbols.<\/p>\n
When checked using online password strength meters, they scored highly. Some tools even suggested it would take centuries to crack them.<\/p>\n
But when those passwords were analyzed properly, a different picture emerged.<\/p>\n
AI systems are powered by something called a large language model, or LLM. That means they\u2019re trained to predict what text should come next. They\u2019re brilliant at producing text that looks natural and plausible.<\/p>\n
What they are not designed to do is create true randomness.<\/p>\n
And strong passwords rely on randomness.<\/p>\n
When researchers examined dozens of AI-generated passwords, they found repeating patterns. Some passwords were duplicates. Many followed very similar structures.<\/p>\n
Interestingly, none of them contained repeating characters.<\/p>\n
That might sound like a good thing, but real randomness often includes repetition. The absence of it suggests the password is following learned rules rather than being generated unpredictably.<\/p>\n
The researchers measured something called \u201centropy\u201d, which is a technical way of describing how unpredictable something is.<\/p>\n
AI-generated passwords scored far lower than a genuinely random 16-character password should.<\/p>\n
That means they could be much easier to crack using a brute-force attack, where attackers try huge numbers of combinations very quickly.<\/p>\n
Online password checkers don\u2019t catch this because they only look at visible complexity.<\/p>\n
They see symbols and numbers and assume it\u2019s secure. They don\u2019t account for the hidden patterns created by AI.<\/p>\n
Even newer models like Gemini 3 Pro have issued warnings when asked to generate passwords, advising people not to rely on chat-generated credentials for sensitive accounts.<\/p>\n
That should tell you something.<\/p>\n
If you want properly secure passwords, use a password manager with a built-in generator.<\/p>\n
These use cryptographic randomness, in other words, mathematical processes specifically designed to create unpredictable results.<\/p>\n
AI is an excellent productivity tool. But when it comes to security essentials like passwords, it\u2019s the wrong tool for the job.<\/p>\n
If you\u2019d like help choosing the right password manager for your business, get in touch.<\/p>\n","protected":false},"excerpt":{"rendered":"
Let me start with a question: If you needed a strong password,…<\/p>\n","protected":false},"author":128,"featured_media":4364,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16],"tags":[],"class_list":["post-4363","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-richardson-blog"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t