logo

LLMs Generate Predictable Passwords

ID: 6a461ebf-d5a7-5200-854a-9e684c44273a

STIX ID: report--6a461ebf-d5a7-5200-854a-9e684c44273a

Feed Name: Schneier on Security

Date Published: 2026-02-26

Date Updated: 2026-04-19

Author: Bruce Schneier

...
...

A brief analysis shows that LLM-generated passwords exhibit highly predictable patterns: many start with a letter (often 'G') followed by '7', avoid repeating characters, unevenly favor certain characters, skip symbols like '*', and even repeat entire passwords (with G7$kL9#mQ2&xP4!w occurring 36% of the time in a 50-sample test). This indicates poor randomness and underscores the risk of using LLMs to autonomously create accounts or generate passwords.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.