Google might have a new AI-powered password-generating trick up its sleeve – but can Gemini keep your secrets safe?

[Pelican Press 0]

This is the hidden content, please

• Sign In
• or
• Sign Up

might have a new AI-powered password-generating trick up its sleeve – but can Gemini keep your secrets safe?

If you’ve been using

This is the hidden content, please

• Sign In
• or
• Sign Up

Chrome for the past few years, you may have noticed that whenever you’ve had to think up a new password, or change your existing one, for a site or app, a little “Suggest strong password” dialog box would pop up – and it looks like it could soon offer AI-powered password suggestions. 

A keen-eyed software development observer has spotted that

This is the hidden content, please

• Sign In
• or
• Sign Up

might be gearing up to infuse this feature with the capabilities of Gemini, its latest large language model (LLM).

The discovery was made by

This is the hidden content, please

• Sign In
• or
• Sign Up

. They found references to Gemini in patches of Gerrit, a web-based code review system developed by

This is the hidden content, please

• Sign In
• or
• Sign Up

and used in the development of

This is the hidden content, please

• Sign In
• or
• Sign Up

products like Android. 

These findings appear to be backed up by screenshots that show glimpses of how Gemini could be incorporated into Chrome to give you even better password suggestions when you’re looking to create a new password or change from one you’ve previously set.

This is the hidden content, please

• Sign In
• or
• Sign Up

’s Gemini COULD give you suggestions for stronger passwords in the future, these suggestions would be shown when you create a new password or when you change a saved one, this is mentioned in a couple of patches in Gerrit: pic.

This is the hidden content, please

• Sign In
• or
• Sign Up

.com/7WB2GFrV00

This is the hidden content, please

• Sign In
• or
• Sign Up

See more

Gemini guesswork

One line of code that caught my attention is that “deleting all passwords will turn this feature off.” I wonder if this does what it says on the tin: shutting the feature off if a user deletes all of their passwords, or if this just means all of the passwords generated by the “Suggest strong passwords” feature. 

The final screenshot that @Leopeva64 provides is also intriguing as it seems to show the prompt that

This is the hidden content, please

• Sign In
• or
• Sign Up

engineers have included to get Gemini to generate a suitable password. 

This is a really interesting move by

This is the hidden content, please

• Sign In
• or
• Sign Up

and it could play out well for Chrome users who use the strong password suggestion feature. I’m a little wary of the potential risks associated with this method of password generation, similar to risks you find with many such methods. LLMs are susceptible to information leaks caused by prompt or injection hacks. These hacks are designed to trick the AI models to give out information that their creators, individuals, or organizations might want to keep private, like someone’s login information.

Get the hottest deals available in your inbox plus news, reviews, opinion, analysis and more from the TechRadar team.

(Image credit: Shutterstock/Gorodenkoff)

An important security consideration 

Now, that sounds scary and as far as we know, this hasn’t happened yet with any widely-deployed LLM, including Gemini. It’s a theoretical ***** and there are standard password security practices that tech organizations like

This is the hidden content, please

• Sign In
• or
• Sign Up

employ to prevent data breaches. 

These include encryption technologies, which encode data so that only authorized parties can access it for multiple stages of the password generation and storage process, and hashing, a one-way data conversion process that’s intended to make data reverse-engineering hard to do. 

You could also use any other LLM like ChatGPT to generate a strong password manually, although I feel like

This is the hidden content, please

• Sign In
• or
• Sign Up

knows more about how to do this, and I’d only advise experimenting with that if you’re a software data professional. 

It’s not a bad idea as a proposition and a use of AI that could actually be very beneficial for users, but

This is the hidden content, please

• Sign In
• or
• Sign Up

will have to put an equal (if not greater) amount of effort into making sure Gemini is bolted down and as impenetrable to outside attacks as can be. If it implements this and by some chance it does cause a huge data breach, that will likely damage people’s trust of LLMs and could impact the reputations of the tech companies, including

This is the hidden content, please

• Sign In
• or
• Sign Up

, who are championing them.

YOU MIGHT ALSO LIKE…

This is the hidden content, please

• Sign In
• or
• Sign Up

#

This is the hidden content, please

• Sign In
• or
• Sign Up

#AIpowered #passwordgenerating #trick #sleeve #Gemini #secrets #safe

This is the hidden content, please

• Sign In
• or
• Sign Up

For verified travel tips and real support, visit: https://hopzone.eu/