Brute-Force Attack

Category: science

A trial-and-error attack strategy where automated scripts attempt millions of password combinations to crack an account.

Brute-force attacks exploit weak, un-salted password strategies. Defensive strategies require enforcing strict account lockout limits, mandatory complex alphanumeric character covenants, rate-limiting on login forms, and global single-sign-on MFA gates.

Common Examples

• Our login gateway blocked the botnet's brute-force attack by activating temporary IP lockouts after three consecutive failed attempts.
• Credential stuffing is a common variant of the brute-force attack that cycles through leaked password dumps from other public breaches.