Don't trust AI to come up with a strong new password for you — LLMs are pretty poor at creating new logins, experts warn

• AI-generated passwords follow patterns hackers can study
• Surface complexity hides statistical predictability beneath
• Entropy gaps in AI passwords expose structural weaknesses in AI logins

Large language models (LLMs) can produce passwords look complex, yet recent testing suggests those strings are far from random.

A study by Irregular examined password outputs from AI systems such as Claude, ChatGPT, and Gemini, asking each to generate 16-character passwords with symbols, numbers, and mixed-case letters.

At first glance, the results appeared strong and passed common online strength tests, with some checkers estimating that cracking them would take centuries, but a closer look at these passwords told a different story.