At present, most password managers already support the detection of weak passwords and detection of whether the password set by the user has been leaked (compare with the leaked password database). When a weak password or a leaked password is detected, the password manager will actively remind the user to go to the corresponding website to modify it. Of course, some users may be too lazy to do so and use weak passwords and leaked passwords for a long time.
In order to solve this problem, Apple has introduced an AI-driven password change function in the iOS 27 password manager. This function will be performed by AI on behalf of the user, such as using the Safari browser to automatically open a website that requires a password change, automatically using the existing account password to log in, automatically finding the place where the password is changed, and then helping the user change the password without user intervention.
Apple describes the system as an intelligent system that mainly uses Apple Intelligence and Safari to perform operations. Users only need to check the list of weak passwords and leaked passwords in the password manager, and then click the repair button. After clicking the repair button, the intelligent system will perform operations on behalf of the user in the background, and the progress of changing the current password will be displayed in real-time activities in the iOS Notification Center.
For users, this can free their hands to avoid long-term use of weak passwords and leaked passwords due to laziness and procrastination, thus improving account security. When changing passwords, AI will also generate high-strength random passwords and automatically replace the modified passwords in the password manager, so users must subsequently log in through the password manager (after all, the user no longer knows the modified password at this time).
This use of high-strength random passwords can also deal with other data leakage and credential stuffing problems, that is, each website uses a completely different high-strength random password. Even if there is a data leakage on individual websites in the future, hackers will not be able to use the password to log in to the user's other website accounts, solving the potential security risks caused by users using the same password on multiple websites.