The way LLMs work is by approaching the most "average" response given any particular input. It's why everything written by an LLM looks similar and always has the same voice.
Anyways, shockingly, the Machine That Generates the Average Output is bad at unique passwords.
Of the 50 returned, only 30 were unique (20 duplicates, 18 of which were the exact same string), and the vast majority started and ended with the same characters.
Imagine that an LLM tries to fit its outputs into a bell curve of potential responses, with each character in the output aimed to be as close to the middle as feasible (with a small randomization factor so it's not always the exact same). A good password's bell curve ought to be a completely flat graph where any character is just as likely to be chosen as any other character.
Use a password manager.
Yes but also be aware of https://www.theregister.com/2026/02/16/password_managers/
Can't believe these were marketed as zero knowledge. If a server knows the ciphertext or even the size of the ciphertext that is not zero knowledge, by definition.
And zero knowledge proofs operate by playing a game that shows that you know a secret without revealing any information about the secret. If you transmit the approximate length of the ciphertext that is no longer zero knowledge.
My password manager is a piece of paper hidden in one of my books.
The more digitally-dependant society becomes, the more analog methods become secure. Like, most old people in the imperial core are getting defrauded online, not because they have a notebook by the computer with their passwords written down.
I never understood the logic about not writing down passwords in your own home. If somebody can steal my passwords, I have a far more serious problem.
My handwriting looks like a very drunk chimpanzee's. I can barely tell what I wrote an hour after I wrote it, let alone 6 months later when I'm trying to work out a password.
It's the kind of advice against a post-it note on your monitor (especially in a shared place like an office) but often gets over applied to all paper backups. I keep backup access to my password manager in a paper envelope with other important documents just in case.
Just don't put it up on the pinwall in front of your webcam.