A brute-force attack tries every possible combination of characters until the correct password is found. It is usually automated and can crack weak passwords quickly.
Key points
Definition:Brute-Force Attack: an attack method that systematically tries every possible combination of usernames and passwords until the correct one is found.
Usually automated using software that can test thousands of combinations per second.
The longer and more complex the password, the longer a brute-force attack takes.
Exam Tip:Strong, complex passwords are the main defence against brute-force attacks — longer passwords with a mix of characters are exponentially harder to crack.
Exam Tip:Locking accounts after a set number of failed login attempts is another effective defence.