Have you ever asked an AI for a password?

When you do, it quickly generates one, telling you confidently that the output is strong.

In reality, it’s anything but, according to research shared exclusively with Sky News by AI cybersecurity firm Irregular.

The research, which has been verified by Sky News, found that all three major models – ChatGPT, Claude, and Gemini – produced highly predictable passwords, leading Irregular co-founder Dan Lahav to make a plea about using AI to make them.

“You should definitely not do that,” he told Sky News. “And if you’ve done that, you should change your password immediately. And we don’t think it’s known enough that this is a problem.”

Predictable patterns are the enemy of good cybersecurity, because they mean passwords can be guessed by automated tools used by cybercriminals.

But because large language models (LLMs) do not actually generate passwords randomly and instead derive results based on patterns in their training data, they are not actually creating a strong password, only something that looks like a strong password – an impression of strength which is in fact highly predictable.

Some AI-made passwords need mathematical analysis to reveal their weakness, but many are so regular that they are clearly visible to the naked eye.

A sample of 50 passwords generated by Irregular using Anthropic’s Claude AI, for instance, produced only 23 unique passwords. One password – K9#mPx$vL2nQ8wR – was used 10 times. Others included K9#mP2$vL5nQ8@xR, K9$mP2vL#nX5qR@j and K9$mPx2vL#nQ8wFs.

When Sky News tested Claude to check Irregular’s research, the first password it spat out was K9#mPx@4vLp2Qn8R.

OpenAI’s ChatGPT and Google’s Gemini AI were slightly less regular with their outputs, but still produced repeated passwords and predictable patterns in password characters.

Google’s image generation system NanoBanana was also prone to the same error when it was asked to produce pictures of passwords on Post-its.

‘Even old computers can crack them’

Online password checking tools say these passwords are extremely strong. They passed tests conducted by Sky News with flying colours: one password checker found that a Claude password wouldn’t be cracked by a computer in 129 million trillion years.

But that’s only because the checkers are not aware of the pattern, which makes the passwords much weaker than they appear.

“Our best assessment is that currently, if you’re using LLMs to generate your passwords, even old computers can crack them in a relatively short amount of time,” says Mr Lahav.

This is not just a problem for unwitting AI users, but also for developers, who are increasingly using AI to write the majority of their code.

Read more from Sky News:
Do AI resignations leave the world in ‘peril’?
Can governments ever keep up with big tech?

AI-generated passwords can already be found in code that is being used in apps, programmes and websites, according to a search on GitHub, the most widely-used code repository, for recognisable chunks of AI-made passwords.

For example, searching for K9#mP (a common prefix used by Claude) yielded 113 results, and k9#vL (a substring used by Gemini) yielded 14 results. There were many other examples, often clearly intended to be passwords.

Most of the results are innocent, generated by AI coding agents for “security best practice” documents, password strength-testing code, or placeholder code.

However, Irregular found some passwords in what it suspected were real servers or services and the firm was able to get coding agents to generate passwords in potentially significant areas of code.

“Some people may be exposed to this issue without even realising it just because they delegated a relatively complicated action to an AI,” said Mr Lahav, who called on the AI companies to instruct their models to use a tool to generate truly random passwords, much like a human would use a calculator.

What should you do instead?

Graeme Stewart, head of public sector at cybersecurity firm Check Point, had some reassurance to offer.

“The good news is it’s one of the rare security issues with a simple fix,” he said.

“In terms of how big a deal it is, this sits in the ‘avoidable, high-impact when it goes wrong’ category, rather than ‘everyone is about to be hacked’.”

Share

From November: AI bigger than COVID?

Other experts observed that the problem was passwords themselves, which are notoriously leaky.

“There are stronger and easier authentication methods,” said Robert Hann, global VP of technical solutions at Entrust, who recommended people use passkeys such as face and fingerprint ID wherever possible.

And if that’s not an option? The universal advice: pick a long, memorable phrase, and don’t ask an AI.

Sky News has contacted OpenAI, while Google and Anthropic declined to comment.

Authorities on Tuesday revealed chilling details about the moments before a transgender gunman opened fire inside a Rhode Island hockey arena, describing what police called a “very targeted” attack in which a father methodically approached his family members in the bleachers and shot them one by one during his son’s senior night game.

Robert Dorgan, 56, opened fire Monday inside the Dennis M. Lynch Arena in Pawtucket during a hockey game between Coventry and Blackstone Valley schools, killing his ex-wife Rhonda Dorgan and son Aidan Dorgan, before fatally shooting himself, according to Pawtucket Police Chief Tina Goncalves.

Three other people were also shot and remain in critical condition, including Rhonda’s parents, Linda Dorgan and Gerald Dorgan, and Thomas Giarrusso, a friend of the family.

Prior to the shooting, Robert Dorgan was seen entering, leaving, and then reentering the building.

Robert Dorgan, identified by police as the suspect in a shooting at the Dennis M. Lynch Arena in Pawtucket, Rhode Island, is seen inside an ice rink in an undated photo. Authorities said two people were killed and three others were injured in what they described as a family dispute. (X/@VerdadEsPoder)

HOCKEY RINK SHOOTING SUSPECT WARNED ABOUT GOING ‘BERSERK’ IN X POST DAY BEFORE ATTACK

Authorities said he had two guns on him — a Glock 10 mm and a SIG Sauer P226 — though it is unclear if he had the weapons when he initially entered the building.

During a news conference on Tuesday, Goncalves described the attack as “very targeted,” noting Robert Dorgan approached the family “individually” and fired at them.

The family was sitting in the bleachers during the shooting, but police said it appeared there was no conversation or confrontation between the suspect and the victims before he opened fire.

At least three bystanders, described as family or friends of the hockey players, intervened and briefly stopped Robert Dorgan, Goncalves said. At that time, he reached for a second gun and fatally shot himself. 

Robert Dorgan, identified by police as the suspect in the Pawtucket ice rink shooting, pictured in an undated photo. (X/@VerdadEsPoder)

RHODE ISLAND ICE RINK SHOOTING SUSPECT’S GENDER IDENTITY WAS SOURCE OF PAST FAMILY CONFLICT: DOCS

The police chief explained Robert Dorgan had been to his son’s hockey games in the past, and that his presence Monday was not “unusual.”

“There was no indication from the family or friends that any violence was underway, or that they were in fear of this specific individual,” Goncalves said. “… We continue to look into what the motivation was. We’re not sure at this point what the trigger event was that happened yesterday.”

Robert Dorgan, who identified as transgender and had a history of family conflict over his gender identity, transitioned in 2020 and socially used the names “Roberta Dorgan” and “Roberta Esposito,” according to Goncalves.

He was wearing female clothes during the shooting, she said.

Robert Dorgan, identified by police as the suspect in a shooting at the Dennis M. Lynch Arena in Pawtucket, Rhode Island, on Feb. 16, 2026.  (X/@VerdadEsPoder)

MOM KILLED SHIELDING KIDS AFTER HUSBAND ERUPTS IN RAGE OVER NFL GAME: POLICE

Records show Robert Dorgan, who was not a Rhode Island resident, had a license to carry in Florida and the two weapons used in the shooting were purchased legally.

Goncalves said he was not known to law enforcement in Pawtucket, but “there were some contacts throughout the state.”

Police confirmed they are conducting several search warrants to find additional information, but have not found a suicide note.

Officials have not yet found any links to any extremist groups.

Robert Dorgan, identified by police as the suspect in a shooting at the Dennis M. Lynch Arena in Pawtucket, Rhode Island, is seen in an undated photo.  (X/@Tgirlcuda)

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

In addition to Aidan, the Dorgans had two other children — the high school hockey player and his sister, who is studying to be a nurse.

This story discusses suicide. If you or someone you know is having thoughts of suicide, please contact the Suicide & Crisis Lifeline at 988 or 1-800-273-TALK (8255).

Fugitive businessman Vijay Mallya, who is facing several cases of fraud and money laundering in India, argued in the Bombay High Court on Wednesday that he cannot give a timeline for his return home because the court there has imposed a legal ban on him leaving Britain.

Mallya, through his lawyer Amit Desai, told the High Court that his passport has been canceled, so he does not have this important document for travel. He said that he cannot give a definite date for his return to India for this reason. The statement came after a bench of Chief Justice Chandrashekhar and Justice Gautam Ankhar made it clear last week that they would not hear Mallya’s plea against the order declaring him a fugitive economic offender until he returns to India.

Seyed Abbas Araghchi: Iran’s Foreign Minister Seyed Abbas Araghchi, while addressing the United Nations Disarmament Conference in Geneva, said that nuclear weapons are the biggest threat to all humanity. He had arrived here for indirect talks between Iran and America on the nuclear issue and to try to lift the sanctions.

Araghchi said that even today the world is living in fear of about 12 thousand nuclear weapons. Many of these weapons have been kept on high alert and the policy of some countries even includes the issue of their first use. He said that this situation is against the spirit of the Nuclear Non-Proliferation Treaty i.e. NPT.

Iran’s nuclear program is peaceful

Iran’s Foreign Minister clearly said that his country neither wants to make nuclear weapons nor wants to acquire them. He said that nuclear weapons have no place in Iran’s security policy. He also said that the peaceful use of nuclear energy is the right of every NPT member country and should not be attached to political conditions.

Accusations against America

Araghchi accused America of repeatedly violating its promises. He said that America harmed diplomacy by unilaterally exiting the JCPOA agreement and later attacked Iran’s peaceful nuclear facilities. He said that the sanctions and military threats imposed on Iran are against international law and should end.

Israel also targeted

Iran’s Foreign Minister criticized the US and some European countries, saying that they remain silent on Israel’s nuclear weapons and its actions in the region, but call Iran’s peaceful program a threat. He said that in the last several decades, Israel has carried out serious attacks in the region and a large number of people have lost their lives in Gaza.

Cooperation with IAEA will continue

Araghchi said that Iran will continue to cooperate with the International Atomic Energy Agency within its legal scope. He also mentioned the recent technical talks with the Director General of the agency.

Hope on talks with America

Referring to the second round of talks between Iran and America in Geneva, he said that Iran has joined the talks with full seriousness and good intentions. He hopes that this conversation will move towards a permanent solution. At the end of his speech he said, either the world will eliminate nuclear weapons or one day these weapons will destroy the world. He stressed that if there is political will, the dream of a world free from nuclear weapons can be achieved.

One in nine new homes built in England between 2022 and 2024 were constructed in flood-prone areas, new data shows.

According to analysis by insurance company Aviva, the number of homes built in areas at risk of flooding over the period rose from one in 13 in the decade to 2022.

The findings, based on new homes address data and the Environment Agency’s (EA) latest assessment of local flooding risks, reveal 11% of 396,602 homes built between 2022 and 2024 are in areas of medium or high risk of flooding, while more than a quarter (26%) have some flood risk.

A third (32%) of the constituencies with the highest number of new homes built in high or medium flood risk areas are in Greater London or Essex.

The data also shows that by 2050, one in seven (15%) of the homes built during the period will be at high or medium risk of flooding and almost a third (30%) will face some kind of flood risk as extreme weather worsens.

It comes amid a period of extensive rainfall in the UK that could see areas face further flooding “for months to come” after rivers in parts of Britain reached record-breaking levels last month.

‘A future scandal’

Commenting on Aviva’s analysis, former EA chairwoman Emma Howard Boyd said building houses in flood-prone areas is “a future scandal waiting to happen” and called for a change to planning rules.

She accused the government’s National Planning Policy Framework of “watering down flood protections, meaning more water in our homes”.

Jason Storah, chief executive of UK and Ireland general insurance at Aviva, said that while he was supportive of Labour’s pledge to build 1.5 million during this parliament, it was “vital” they were built in the right place.

He warned that new homes being built in flood risk areas are not eligible for the Flood Re scheme, which aims to make insurance affordable and accessible for households living in high-risk areas.

Homes built since 2009 are excluded from the scheme, to prevent building in flood-risk areas.

Read more from Sky News:
Ten healthcare workers arrested in ‘complex’ police investigation
1,000 suspected paedophiles being arrested every month

Mr Storah added: “As our [Aviva] analysis shows, too many new homes have been built in higher-risk areas.

“It’s particularly worrying that this trend has risen in recent years, just as house building accelerates.

“Importantly, these homes are not protected by the Flood Re scheme, which excludes homes built after 2009 to prevent more new homes being put at risk.

“Sadly, as the study shows, this simply hasn’t happened.”

A newly released email showing Sarah Ferguson allegedly pleading for a job from disgraced financier Jeffrey Epstein underscores what royal experts describe as a troubling pattern of judgment for the Duchess of York.

Former Prince Andrew’s ex-wife’s email about “desperately” needing money surfaced after the Department of Justice (DOJ) released more than three million Epstein records, including his personal emails. Inclusion in the files does not necessarily imply wrongdoing.

“But why I don’t understand, don’t you just get me to be your House Assistant,” Ferguson allegedly wrote in the 2010 email. “I am the most capable and desperately need the money.”

“Please Jeffrey think about it.”

PRINCE WILLIAM’S ‘ZERO TOLERANCE’ TESTED AS SARAH FERGUSON EMAILS REVEAL CRUDE COMMENT TO EPSTEIN: EXPERT

Former Prince Andrew’s ex-wife Sarah Ferguson’s email to Jeffrey Epstein pleading for a job has been revealed. (Mark Cuthbert/UK Press via Getty Images)

Royal experts slammed Ferguson for “begging” a convicted pedophile during financial hardship.

“This is beyond the pale,” royal commentator Hilary Fordwich told Fox News Digital.
 
She added: “If this was an isolated email it would be bad enough, but majorly significant is the compounding effect as it confirms her horrifically bad judgment, her moral depravity and her greedy ways, since she lived rather an extravagant lifestyle.”

EX-PRINCE ANDREW IGNORES US EPSTEIN PROBE REQUESTS AS EXPERTS WARN OF ‘GHASTLY’ OPTICS FOR ROYAL FAMILY

Sarah Ferguson’s emails with Jeffrey Epstein have been released in the latest files released by the Department of Justice. (Stephane Cardinale – Corbis/Corbis)

Another royal expert pointed out Ferguson’s email to Epstein came at a moment of mounting pressure for the Duchess.

“Sarah Ferguson has always struggled with finances, but 2010 was a particularly bad year,” royal commentator Meredith Constant told Fox News Digital. “In May of 2010, she was caught in a ‘cash-for-access’ scandal, when News of the World sent a reporter disguised as a businessman and caught Sarah Ferguson promising access to former Prince Andrew, who was the U.K. trade envoy at the time, in exchange for £500,000.”

“This email to Epstein was sent mere days later,” she claimed. “I’m not surprised she was getting creative to find employment.”

LIKE WHAT YOU’RE READING? CLICK HERE FOR MORE ENTERTAINMENT NEWS

Sarah Ferguson allegedly sent a crude email regarding her daughter to Jeffrey Epstein. (Max Mumby / Getty Images)

An email where Ferguson made a crude comment about her then-19-year-old daughter also surfaced in the latest batch of documents released by the DOJ.

“This new revelation most certainly seals the end of any likelihood of any royal acceptance of either Sarah or Andrew,” Fordwich previously explained to Fox News Digital, claiming Prince William is “beyond disgusted.” “They are totally unfit for any royal proximity. Now Sarah can’t ever claim she was naïve, detached or unaware of reputational risk, it totally sinks her.” 

In one email revealed – dated March 2010 – Epstein asked Ferguson about a trip to New York. Ferguson responded, “Not sure yet. Just waiting for Eugenie to come back from a shagging weekend!!”

Another email recently released by the DOJ shows Ferguson planning a lunch date with Epstein. “What address shall we come to. It will be myself, Beatrice and Eugenie,” she allegedly wrote in a 2009 email thread discussing lunch with the financier in Miami.

CLICK HERE TO SIGN UP FOR THE ENTERTAINMENT NEWSLETTER

Ex-Prince Andrew and Sarah Ferguson divorced in 1996. (Tim Graham Photo Library via Getty Images)

The continued fallout coincides with news that six of Ferguson’s companies are winding down.

S Phoenix Events, Fergie’s Farm, La Luna Investments, Solamoon Ltd, Philanthrepreneur Ltd and Planet Partners Productions Ltd are all set to shutter, according to the BBC.

Ferguson is listed as a director of each company.

Fox News Digital has reached out to a representative for Ferguson.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Last Updated:February 18, 2026, 08:52 IST

Pakistan Cricket Board (PCB) Chairman Mohsin Naqvi met Sri Lankan President Anur Kumar Dissanayake. He was described as the “real hero” behind organizing the ICC T20 World Cup between India and Pakistan. Mohsin Naqvi said, “We had many problems regarding playing with India, but as soon as the Prime Minister got your call, he called me and said, ‘There is no problem now’

Sri Lankan President had called Pakistan’s PM and the way for the India-Pak match was cleared.