What is brute force attack?

Updated May 6, 2026

Short answer

Brute force attack tries many password combinations until success.

Deep explanation

Automated tools systematically guess credentials using dictionaries or random combinations.

Real-world example

Login systems without rate limiting get attacked.

Common mistakes

  • Not enforcing account lockout policies.

Follow-up questions

  • How to defend against it?
  • What is credential stuffing?

More Web Security interview questions

View all →