Today’s high school students face an uncertain road ahead. AI is changing what skills are valued in the job market, and the Trump administration’s funding cuts have stalled scientific research across disciplines. Most professions seem unlikely to look the same in 10 years, let alone 50. Even students interested in STEM subjects are asking: What can my career look like, and how do I get there?

WIRED talked to five high school seniors from across the country about their interest in STEM—and how they’re making sense of the future.

These comments have been edited for length and clarity.

This Generation Needs to Be at the Forefront of AI Development

I’ve always had an interest in computer science, but my interest in AI started my junior year. The part that hooked me was how applicable it was to our daily lives. I was able to see the rise of ChatGPT and other LLMs, and how people were using them in my academic life. Some people would use it unethically on tests or assignments, but it could also be used to create practice problems. Being able to see how rapidly it’s evolving in front of me was the main reason I became interested. It’s affecting our academic life so much that it’s imperative that we’re at the forefront of how it’s being developed.

My school is a math and science academy, so I got to explore independent research related to LLMs. One of the main things I worked on was how LLMs can sometimes indirectly give out private data. Say you ask it to code something for you that requires an API key, which is sensitive information. Because it’s trained on a vast amount of data, it could have an API key in its data set, and it’ll give you code, possibly including the API key. My most accomplished research project was developing an algorithm to cut out those private pieces of data during its training, to allow it not to spew out these pieces of private data during use.

AI is such a new field that’s evolving, that if we’re able to set roots in it right now, we’d be able to see that outcome as we grow older. Understanding its security is very important to me, especially considering it’s being used almost blindly by everyone. What interests me is being at the forefront and making sure I can have some say in how my data is being used.

I’m applying to undergrad programs right now, and I’m also looking at some untraditional routes, where you go straight into an industry. Right now, in computer science, sometimes a degree is just a baseline, and if you have the skills, it’s not even necessary. So I’m looking into other options. —Laksh Patel, 17, Willowbrook, Illinois

Health Care Access Starts With Communities

My family, on both sides, has a long history of women developing neurodegenerative disease, mostly Alzheimer’s and Parkinson’s. So I spent my whole childhood playing doctor, treating my family matriarchs, tending to them and seeing how their diseases progressed. I became so interested in how these diseases worked, and how I could help patients like the ones in my family and my community who didn’t have access to medical resources because of their income.

I’ve really developed a love for patient care, for being able to help a person in such a debilitating time in their lives. As those female family members began to fade away and pass on, I realized how quickly these diseases spread and why they were so detrimental, especially without proper medicine. When I got into high school, I started to get oriented with research, so that I could gain a base level of understanding to bring to college to try to begin my career as early as possible and help more people.

Passwords are the keys to our digital lives—think how many times you log in to websites and other systems. But just like physical keys, they can be lost, duplicated and stolen.

Many alternatives have been proposed in recent years, including passkeys. These offer a significant improvement in terms of user friendliness and potential for widespread use.

But what exactly are they—and how do they differ from passwords?

Passwords are vulnerable

In simple terms, a password is a secret word or phrase that you use to prove who you are to computer systems and/or online. If you have an account on a website or subscribe to a service provider you likely have many.

Passwords themselves are fine; it is the way we implement and use them that makes them vulnerable. For example, weak password habits are everywhere. A CyberNews report from earlier this year identified 94% of 19 billion leaked passwords were re-used. It also identified several similarities in passwords, including strings of numbers such as “123456,” people’s names, cities, popular brands and swear words.

And when a breach occurs, stolen passwords can spread quickly. This leads to accounts being taken over, identity theft and/or phishing attacks. In one experiment, hackers were trying to use leaked credentials within an hour.

Passwords are also vulnerable to phishing, which is when scammers trick you into typing your password (or other information) into a fake account login page. Phishing emails continue to grow in number and consequence with one report indicating more than 3 billion phishing emails sent per day globally.

A good password is unique (that is, never re-used) and complex (imagine a sequence of letters, numbers and symbols such as “e8bh!kXVhccACAP$48yb”). It can also be a unique combination of multiple words to create a phrase or memorable sequence.

This could be difficult to remember, although creating a story that uses the contents of the password might help. For example, say your password was “CrocApplePurseBike.” You could remember it by thinking of the Crocodile that packed its Apple into a Purse before riding a Bike.

What are passkeys and how do they work?

Passkeys first started to emerge roughly four years ago. They use a mathematical process called public-key cryptography to create a unique set of information that is split into two parts—or keys.

One key is public and can be shared with websites; the other is a private key that is stored securely on your device. To sign into an account, the website sends a random challenge (such as a number) and your device uses the private key to “approve” the login request. This approval is usually called “signing” the request and applies a mathematical process to the challenge.

Your device won’t just do this automatically; you will typically be required to approve the request. For many mobile devices this will require your face or fingerprint to be used to authorize the response to be sent.

Finally, the website checks the signature via the public key it already has. If it confirms the challenge, you are in.

Stronger by design

Passkeys are stronger than passwords by design. It doesn’t matter if the public key is stolen, because it cannot be used on its own. Your private keys are safely protected by your device’s security, with most using face or finger-based biometrics to unlock (it is best to avoid relying on a PIN).

Each passkey is also unique for every service you use; even if the key for a site could be stolen, it cannot be used elsewhere.

Another plus is that passkeys are resistant to phishing. From a user perspective, there isn’t a password to send in response to a phishing email. A request to log in on a site has to come from the registered device combined with the approval of the user.

Passkeys are also more convenient than passwords. You don’t have to look for the password you used when you registered—the passkeys are already linked to your device and are only a finger/face verification away.

There are, however, some issues with passkeys. For one, while many browsers, operating systems and websites are embracing passkeys, this isn’t universal. And some early implementations suffered with compatibility between devices (such as between Microsoft and Apple devices).

As users move to newer devices and manufacturers improve integration, these issues should disappear.

A clear winner

From a security point of view, passkeys are the clear winner. They offer stronger protection, can resist phishing and are easier to use. But until passkeys are everywhere, passwords will still play a supporting role.

Implementing passkeys on a website requires effort from the company concerned. With a vast number of sites requiring users to create accounts, the process of migrating them all to passkeys is going to take decades. Many will never adopt the practice unless other factors force their hand.

For now, it’s crucial that we continue to focus on password hygiene by using strong, unique passwords and enabling multi-factor authentication wherever possible. If you do nothing else after reading this article, at least change any re-used passwords.

This article is republished from The Conversation under a Creative Commons license. Read the original article.