Why AI shouldn't be creating your passwords

Michael Tunstall

May 30, 2026

Artificial intelligence is becoming part of everyday business life.

People are using it to write emails, summarise meetings, generate reports, and even create code.

So it's not surprising that some people are starting to use AI for another task: generating passwords.

After all, if AI can handle complex business tasks, surely it can create a secure password?

Not necessarily.

The problem with AI-generated passwords

At first glance, AI-generated passwords often look impressive.

They're usually long, include a mix of upper and lower-case letters, numbers, and special characters, and appear to meet all the requirements you'd expect from a strong password.

Run them through an online password checker and they often score highly.

The issue is that appearance and security aren't always the same thing.

Strong passwords rely on unpredictability.

AI relies on patterns.

And that's where the problem begins.

AI isn't designed to create randomness

Large language models such as ChatGPT, Copilot, and Gemini are trained to predict what content should come next based on the information they've already seen.

That's what makes them so effective at producing human-like text.

But generating genuinely random passwords isn't what they were built for.

Recent research found that AI-generated passwords often followed similar structures and patterns.

Some were even repeated.

While the passwords looked complex, they weren't as unpredictable as they appeared.

And when it comes to password security, unpredictability is what matters most.

Why this matters

Cyber criminals don't care whether a password looks secure.

They care about how difficult it is to crack.

If passwords follow predictable patterns, attackers can use those patterns to improve the effectiveness of password-cracking tools and brute-force attacks.

A password may contain symbols, numbers, and upper-case letters, but if it's generated using predictable rules, it can still be weaker than expected.

That's something many password strength checkers fail to identify.

They measure visible complexity rather than true randomness.

A better approach

If you want strong passwords, use tools specifically designed for the job.

Password managers include built-in password generators that use cryptographic randomness to create genuinely unpredictable passwords.

They're designed for security rather than conversation.

Just as you wouldn't use a spreadsheet to edit photos, it makes sense to use the right tool for password creation too.

In conclusion

AI is an excellent productivity tool and can help businesses save time in countless ways.

But not every task should be handed to artificial intelligence.

When it comes to passwords, randomness is far more important than creativity.

Using a dedicated password manager remains one of the safest and most effective ways to generate and store secure passwords.

If you'd like advice on password managers, security best practice, or protecting business accounts, we're always happy to help.

<All Posts