AI-Generated Passwords: Are They Strong Enough?

Memorizing passwords has become a way of life. With so many different websites, apps, and services out there, all of which require you to sign up with a username and password, it has become difficult to keep track of them all. Some do it in simple apps like notepad or keep a spreadsheet with the information.

In reality, those are massive security risks. Only through a dedicated password manager can individuals and businesses remain safe online. No matter which industry you work in, a simple and effective tool like a password manager can help to simplify life and make your digital experience a safer one. The key is knowing about the different levels of protection available.

Level 1:Basic Protection

For those who like to simply browse the internet at home or work, a simple password manager will do just fine. There are plenty of free tools out there that will pre-fill information for you, allowing you to keep secure passwords without the threat of losing or forgetting it.

Even better, you can store passwords locally for easy access. Proton Pass is an excellent option for keeping your username and password safe, secure, and easily accessible at all times.

Level 2: Families and Busy Professionals

Those who transition between work and the office, individuals who do document transfers, emailing, or even password sharing, will want a password manager that is a bit more comprehensive. Something that is affordable but has helpful features would go a long way.

Some come with things like dark web monitoring, emergency access, document storage, and even email alias generation. It also allows you to share passwords through time-sensitive, encrypted links that are far less likely to be compromised. All of which means being able to share information with a far lower risk of a compromise.

Level 3: Advanced Security

Someone who has a public-facing or high-profile job – politician, executive, journalist, activist, etc. – would be best off using a password manager that has more comprehensive security features. Things like activity logs are critical because it lets you know when someone (authorized or not) gains access to your vault.

Other tools like dark web scanning and phishing alerts also help to improve your overall level of security. These tools are invaluable when it comes to protecting secure, information that could be potentially damaging if the information were to fall into the wrong hands.

Multi-Factor Authentication (MFA) is Crucial

You will come across a slew of different features depending on the password manager. Perhaps the most critical is multi-factor authentication (also known as two-factor authentication). This is an additional layer meant to make it more difficult for unauthorized users to gain access to your credentials.

Even better, that additional “factor” can be a number of different things. It could be a fingerprint, a retinal scan, or voice recognition depending on what kind of software you are using. Some even make it possible for access only from registered, trusted devices. Depending on the sensitivity of the information at hand, two-factor authentication may be a vital step toward protecting information. Larger organizations are making use of these tools to ensure greater security and to provide overall risk mitigation.

The Risks of Using AI-Generated Passwords

While there is a major convenience factor to be had by implementing AI-generated passwords into your everyday life, it is not without risk. For instance, there is one flaw that is inherent in using AI-generated passwords and that is the fact that all LLM-based models operate on probabilities.

This isn’t uncommon. For instance, AI-generated images and text also are made using probability-based functions. Think of it this way: passwords using AI are based on data from already-known passwords. They are then formulated to find passwords that are only considered to be “probably secure.”

Because of this factor, AI-generated passwords aren’t really “random” in the truest sense. Experts note that AI passwords tend to have certain strings and characters that are typically in the same position. Bad as that may be, most AI-generated passwords begin with strings and characters similar in nature, and show little to no variation when it comes to letters or numbers chosen.

Examples of AI-Generated Password Flaws

There are a few noteworthy examples to illustrate this point. For instance, nearly all generated passwords start with a letter, typically uppercase. The letter “G” is the one to appear most frequently. Some characters – L, 9, m, 2, $, and # – appear in virtually all AI-generated passwords while some letters are never used at all.

Virtually none of the passwords generated contained duplicate characters. This would have to happen at some point if the selection process were truly random. The process is aiming to create passwords that are simply “random enough.”

Even worse, some passwords are repeated. In a study that generated 50 new passwords, only 30 of them were truly “new” because of how some repeated. This means that the passwords generated are definitely vulnerable and far from being totally random.

According to some security experts, there are already apparent risks and consequences to using AI-generated passwords. Experts were able to discover certain password patterns using open-source code. These recognizable patterns pose an obvious risk, leading to potential exploitation and the capacity to launch targeted attacks.

Password Managers Make Life Simpler but Come with Risk

There are enough things to worry about in life. Why add remembering your password to that list? With a password manager, you can make life easier and have the general peace of mind that comes with it. Though there are inherent risks, the process is in its infancy and will only get stronger and safer over time. 

For now, proceed with risk when using AI-generated passwords and take precautions that you would normally use when it comes to protecting your passwords and keeping them safe from prying eyes. When in doubt, internet safety best practices are always the safest way to take care of your essential information when online.