this post was submitted on 02 Apr 2026
63 points (100.0% liked)

Privacy

47749 readers
636 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 6 years ago
MODERATORS
 

LLM-generated passwords (generated directly by the LLM, rather than by an agent using a tool) appear strong, but are fundamentally insecure, because LLMs are designed to predict tokens – the opposite of securely and uniformly sampling random characters.

you are viewing a single comment's thread
view the rest of the comments
[–] markz@suppo.fi 50 points 3 days ago (6 children)

Don't tell me people are using llms to generate passwords

[–] kogasa@programming.dev 30 points 3 days ago

People are using LLMs to diagnose disease, write prescriptions, deny health care claims, deny loans and grants, write scientific papers, review scientific papers, draft engineering and architectural documents, and talk to their loved ones

Despair

[–] Steve@communick.news 8 points 3 days ago

Very well. If you don't want me to tell you the truth about people using LLMs to make passwords, I won't.

[–] chicken@lemmy.dbzer0.com 4 points 3 days ago

Even where they aren't, I bet this is something that could end up happening when using them as open-ended agents that might try making their own accounts.

[–] KazuyaDarklight@lemmy.world 4 points 3 days ago

Getting away from more direct requests I can absolutely imagine AI offering passwords/suggestions as part of a coding session. Including "temp" passwords that look secure so "why bother changing it?".

[–] fiatcode@lemmy.ml 1 points 3 days ago

I know someone who generate passwords in AI chat

[–] Ephera@lemmy.ml 1 points 3 days ago

I imagine, it's a matter of asking it to generate some configuration and one of the fields in that configuration is for a password, so the LLM just auto-completes what a password is most likely to look like.