Password cracking attack using lists of common words and known passwords rather than random combinations.
A dictionary attack is a refined brute force approach that tests passwords against lists of common words, known passwords from breaches, and predictable patterns. Rather than trying every combination, dictionary attacks focus on passwords people actually use—common words, names, dates, and variations. Dictionary attacks exploit the reality that humans choose predictable passwords. Even 'complex' passwords following predictable patterns (P@ssw0rd!) are in dictionary lists.
Why It Matters
The DSC Perspective:
Dictionary attacks explain why 'Password123!' isn't secure despite meeting complexity rules. Users should be encouraged to use passphrases or password managers. Checking passwords against known breach lists (like HaveIBeenPwned) prevents use of compromised credentials.