Hotspot default password is generated using std::rand()
The PRNG is seeded with std:time()
. The number of symbols is only lowercase ASCII alphanumric (36 characters), default length is only 8 characters which yields 41.35 bits of entropy in the best case. There is also modulo bias.