“How they created the password was a secret until now!”
Xiaomi air purifier filters carry an NFC tag that the purifier checks before it will run. The password protecting that tag turns out to be a SHA-1 of the tag’s own ID. A cheap NFC sticker now stands in for a whole new filter. The tag was never about air quality. It was about selling filters on a schedule.