Accounts
Brute-force attack
In Turkish: Kaba kuvvet saldırısı
An attacker's program tries huge numbers of passwords until one works. Long, unique passwords make this impractical.
Guessing programs start with the most common passwords and predictable patterns, such as names, dates and keyboard runs like "123456". Each extra character in a random password multiplies the work needed.
Many services also slow down or lock an account after repeated failures, and a second step stops a correct guess from being enough.
What to do
- Avoid names, dates and keyboard patterns in passwords.
- Choose long random passphrases or manager-made passwords.
- Turn on a second step so a lucky guess is not enough.
Related terms
Learn it in the Academy
Try it
Free tools that put this to use.
- Password check
Has this password appeared in a data breach? Checked without the password ever leaving your device.