{"id":3342,"date":"2026-03-03T11:45:30","date_gmt":"2026-03-03T09:45:30","guid":{"rendered":"https:\/\/computershop.eu\/blog\/?p=3327"},"modified":"2026-03-03T12:49:27","modified_gmt":"2026-03-03T10:49:27","slug":"ai-generated-passwords-yes-or-no","status":"publish","type":"post","link":"https:\/\/computershop.eu\/blog\/ai-generated-passwords-yes-or-no","title":{"rendered":"AI-generated passwords, YES or NO?"},"content":{"rendered":"Reading Time: <\/span> 2<\/span> minutes<\/span><\/span>\n

Password generation often seems like a simple task: you need a few letters, numbers, and symbols, and you’re done\u2026 you have a “secure” password. However, the reality is much more complex, and if you rely on an artificial intelligence model, such as ChatGPT, Gemini, or Claude, to create secure<\/strong> passwords<\/strong>, you are making a major security mistake. Recent studies show that LLM (Large Language Models) do not provide the strict randomness necessary to protect your online accounts.<\/p>\n\n\n\n

1. These AI-generated passwords are not truly random<\/h2>\n\n\n\n

Many users have started asking chatbot applications to generate passwords for their personal accounts, from email to social networks or banking platforms. The problem is that AI models, including ChatGPT<\/em>, Google Gemini<\/em>, and Claude<\/em>, do not create completely random passwords. Instead of pure cryptography, these models produce results based on recurring patterns in the training data, making the passwords much easier to guess<\/strong> than they appear at first glance.<\/p>\n\n\n\n

For example, a recent analysis by the cybersecurity firm Irregular<\/a> tested these systems by generating 50 passwords. The results showed only 23 unique passwords, and some were repeated dozens of times.<\/p>\n\n\n\n

2. “Complicated” passwords that are easy to crack<\/h2>\n\n\n\n

Although online password checkers may show a good score for these passwords, studies emphasize that apparent chaos does not mean real security<\/strong>. A string of 16 characters generated by AI may seem complex, but if it has a repetitive structure, an attacker can exploit this predictability to dramatically reduce the number of possible guesses. Security experts warn that pattern-based passwords can be cracked much faster than you think.<\/p>\n\n\n\n

The entropy<\/a> of AI-generated passwords, which measures how hard it is to guess a string of characters, has been estimated at values far below the recommended levels for real security. One example shows that AI passwords may have only ~27 bits of entropy, compared to ~98 bits or more for truly random<\/strong> passwords used by top password manager applications.<\/p>\n\n\n\n

3. The danger is not just theoretical<\/h2>\n\n\n\n

In addition to the fact that AI-generated passwords are predictable, they can end up in public repositories or source code (in the case of programmers who leave AI-generated passwords in files .env<\/code>). Similarly, attackers can build lists of patterns observed in passwords generated by AI models, using them later in automated attacks.<\/p>\n\n\n\n

Moreover, if you have already used AI-generated passwords, experts recommend immediate change<\/strong>, especially for sensitive accounts, as the vulnerability is not just theoretical but can already be found in current practice.<\/p>\n\n\n\n

4. Safer alternatives for account security<\/h2>\n\n\n\n

There are much safer methods for managing passwords:<\/p>\n\n\n\n