Attack method that systematically tries every possible password combination until the correct one is found.
A brute force attack attempts to crack passwords by systematically trying every possible combination. Pure brute force tests all character combinations, while targeted brute force uses password patterns, common passwords, and personal information to prioritise attempts. Modern computing power makes short or simple passwords vulnerable, while long, complex passwords remain practically impossible to brute force. Account lockout policies, rate limiting, and strong password requirements defend against brute force attacks.
Why It Matters
The DSC Perspective:
Brute force explains why password length matters more than complexity. A 20-character passphrase is vastly harder to brute force than an 8-character complex password. Account lockouts and MFA provide additional protection.