logo

LLMs Generate Predictable Passwords

ID: 824a8f07-5af5-5800-958c-704b58c45d8c

STIX ID: report--824a8f07-5af5-5800-958c-704b58c45d8c

Feed Name: Security Boulevard

Date Published: 2026-02-26

Date Updated: 2026-04-22

Author: Bruce Schneier

...
...

A blog post highlights that LLM-generated “random” passwords show strong, predictable patterns—such as fixed starting characters (e.g., G7), uneven character distributions, avoidance of certain symbols (likely due to Markdown), and even full-password repetition—leading to significantly reduced entropy; it concludes LLMs are ill-suited for secure password generation and flags broader authentication challenges for autonomous AI agents.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.