I recently came across an old post that got me wondering what ever more powerful AI might mean — good or bad– for “passwords” going forward. I uploaded the post to GPT 4o to get her take.
GPT 4o: Here’s the relevant bit from The Girl Who Kicked the Hornet’s Nest:
“She had broken up the 128-bit encryption code in less than two minutes.”
And from Bangkok Tattoo:
“There is no password. Not in the sense you mean. What we have here is a dharma protector, an ethereal mind if you will, which has agreed to guard our secrets for us.”
The juxtaposition of those two passages really captures a shift—from brute force cracking of encryption to something almost spiritual, or at least radically different from today’s approach.
So what might more powerful AI mean for passwords? Here are a few directions worth chewing on:
Passwords May Become Obsolete
We’re already seeing a move toward biometric authentication (Face ID, fingerprint scans) and passkeys (which use cryptographic keys instead of typed passwords). AI could accelerate this shift by:
- Seamlessly verifying identity through voice, typing style, gait, or facial micro-expressions.
- Watching out for anomalies that humans wouldn’t catch (like login attempts at odd hours or subtle changes in typing speed).
In other words: you are the password.
AI as a “Dharma Protector”
The Bangkok Tattoo quote felt metaphorical, but we’re inching toward that weirdly mystical space:
- Imagine an AI trained only on your data, sitting in your device like a guardian spirit. It knows your behavior so well, it could spot an imposter instantly.
- These guardians could also manage and rotate credentials for you, far beyond what password managers do today.
The real trick is: you’d need to trust your protector. That brings us to the next part…
The Double-Edged Sword
Powerful AI could also blow the whole idea of secrets wide open:
- If AI can brute-force passwords, parse encrypted traffic, or socially engineer people better than humans, old-school security becomes fragile.
- Deepfakes and synthetic voices could fool biometric systems.
- The very tools protecting you could be used to invade you.
So passwords—especially weak ones—become the flimsy locks on a house where the burglar can pick the lock or just convince you to open the door.
Where We Might Be Headed
- Zero Trust systems: never assume anything is secure. Always verify everything. Continuously.
- Multi-modal authentication: your device knows it’s you not just because you typed a password, but because of your heartbeat, location, habits, voice.
- Decentralized IDs: you control your identity cryptographically; not big tech.
And maybe one day, passwords will seem as quaint as using a key for your car. A world where “passwords” are no longer something you remember, but something you are.