Expert Opinion: How much can you trust AI created passwords?

Amshire IT’s Dave Taylor explains how while AI generated passwords may look secure, you can’t trust them to keep your data safe.

At first glance, asking AI to create a password feels like a smart idea. The results often include a mix of letters, numbers and symbols, and many even appear to pass online strength tests.

On the surface, they look strong.

In reality, they are not as random as they seem.

The Real Issue Is Predictability

Strong passwords rely on true randomness. This is what makes them difficult for attackers to guess or crack.

AI systems work differently. They are designed to recognise and replicate patterns based on the data they have been trained on. That means they are excellent at producing natural language, but not at generating unpredictable sequences.

Researchers have found that AI created passwords can unintentionally follow patterns. Even when they look complex, they may share similarities or structures that make them easier to guess than truly random passwords.

Why Password Strength Checkers Can Be Misleading

Many people rely on online tools to judge password strength. These tools usually look at things such as:

• Password length
• Use of uppercase and lowercase letters
• Numbers and symbols
• Whether common words are included
• While helpful, these checks do not detect hidden patterns.

This means an AI generated password can appear strong while still being vulnerable in practice.

What Businesses Should Use Instead

Rather than relying on AI, businesses should use dedicated password management tools that are designed to generate secure credentials using true randomness.

Trusted options include:

• 1Password
• Bitwarden
• LastPass
• Keeper Security

These tools also help businesses store credentials securely, reduce password reuse and support stronger security practices across teams.

Final Thought

AI is transforming how businesses work, but not every task should be handed over to it. Password security depends on unpredictability, and that is something AI is not built to guarantee.

For organisations, the safer choice is clear. Use tools designed specifically for security, not general purpose AI systems.