Cybersecurity Alert: AI-Generated Passwords Pose Serious Security Risk
Cybersecurity experts are issuing an urgent warning to anyone using passwords generated by artificial intelligence tools. Research conducted by the cybersecurity firm Irregular has uncovered that popular AI platforms including ChatGPT, Claude, and Gemini produce passwords with highly predictable and repeated patterns, making them vulnerable to rapid hacking attempts.
Immediate Action Required for AI Password Users
Dan Lahav, co-founder of Irregular, has made a public plea urging individuals to immediately change any passwords created by AI systems. "You should definitely not do that," Lahav emphasized in an interview with Sky News. "And if you've done that, you should change your password immediately. We don't think it's known enough that this is a problem."
Lahav explained that large language models (LLMs) do not generate passwords randomly. Instead, they derive results based on patterns found within their training data, creating predictable sequences that compromise security.
Vulnerability Assessment and Expert Commentary
"Our best assessment is that currently, if you're using LLMs to generate your passwords, even old computers can crack them in a relatively short amount of time," stated Mr. Lahav. He further noted that many people may be unknowingly exposed to this security issue simply by delegating password creation to AI assistants.
Graeme Stewart, head of public sector at the cybersecurity firm Check Point, provided additional context. "The good news is it's one of the rare security issues with a simple fix," Stewart remarked. "In terms of how big a deal it is, this sits in the 'avoidable, high-impact when it goes wrong' category, rather than 'everyone is about to be hacked'."
Recommended Password Security Practices
To protect against potential fraud and hacking, cybersecurity authorities recommend abandoning AI-generated passwords in favor of proven security methods. Action Fraud, the UK's national reporting center for fraud and cybercrime, offers three essential tips for maintaining password security:
- Create strong passwords using the '3 random words' method to ensure complexity and uniqueness.
- Use a password manager application to securely store and organize all your passwords.
- Change default passwords and PINs on smart devices, such as replacing common defaults like 0000 with personalized secure codes.
This cybersecurity warning highlights the critical importance of human oversight in digital security practices, even as AI technology becomes increasingly integrated into daily online activities.
