{“lastseen”:”2026-02-19T16:05:09″,”description”:”Using Artificial Intelligence (AI) to generate your passwords is a bad idea. It’s likely to give that password to a criminal who can then use it in a dictionary attack\u2014which is when an attacker runs through a prepared list of likely passwords (words, phrases, patterns) with automated tools until one of them works, instead of trying every possible combination.\\n\\nAI cybersecurity firm Irregular tested ChatGPT, Claude, and Gemini and found that the passwords they generate are \u201chighly predictable,\u201d and not truly random. When they tested Claude, 50 prompts produced just 23 unique passwords. One string appeared 10 times, while many others shared the same structure. \\n\\nThis could turn out to be a problem.\\n\\nTraditionally, attackers build or download wordlists made of common passwords, real\u2011world leaks, and patterned variants (words plus numbers and symbols) to use in dictionary attacks. It requires almost no effort to add a thousand or so passwords commonly provided by AI chatbots.\\n\\nAI chatbots are trained to provide answers based on what they\u2019ve learned. They are good at predicting what comes next based on what they already have, not at inventing something completely new.\\n\\nAs the researchers put it:\\n\\n\\u003e \u201cLLMs work by predicting the most likely next token, which is the exact opposite of what secure password generation requires: uniform, unpredictable randomness.\u201d\\n\\nIn the past, we explained why computers are not very good at randomness in the first place. Password managers get around this fact by using dedicated cryptographic random number generators that mix in real\u2011world entropy, instead of the pattern\u2011based text generation you see with LLMs.\\n\\nIn other words, a good password manager doesn\u2019t \\”invent\\” your password the way an AI does. It asks the operating system for cryptographic random bits and turns those directly into characters, so there\u2019s no hidden pattern for attackers to learn.\\n\\nA website or platform where you submit such passwords may tell you they’re strong, but the same basic reasoning as to why you shouldn\u2019t reuse passwords applies. What use is a strong password if cybercriminals already have it?\\n\\nAs always, we prefer passkeys over passwords, but we realize this isn’t always an option. If you have to use a password, don\u2019t let an AI make one up for you. It\u2019s just not safe. And if you already did, consider changing it and add multi-factor authentication (2FA) to make the account more secure.\\n\\n* * *\\n\\n**We don ‘t just report on privacy\u2014we offer you the option to use it.**\\n\\nPrivacy risks should never spread beyond a headline. Keep your online privacy yours by using Malwarebytes Privacy VPN.”,”published”:”2026-02-19T14:46:58″,”modified”:”2026-02-19T14:46:58″,”type”:”malwarebytes”,”title”:”AI-generated passwords are a security risk”,”source”:””,”references”:””,”id”:”MALWAREBYTES:6057A582FC032971AB785DF129C1A603″,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.malwarebytes.com\/blog\/news\/2026\/02\/ai-generated-passwords-are-a-security-risk”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-02-19T16:05:09″,”description”:”Using Artificial Intelligence (AI) to generate your passwords is a bad idea. It’s likely to give that password to a criminal who can then use…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,115,13,33,7,11,5],"class_list":["post-41630","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-malwarebytes","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n