Brute Force (Password Attack)

Updated 31 Jul 2026

•
def
- •
  systematically trying every possible password combination against an account until the correct one is found
•
types
- •
  online brute force — attempted directly against a live login service (slow, and easily detected/rate-limited)
- •
  offline brute force — attempted against a stolen password database/hash file, with no rate limiting and much greater speed
•
related
•
cards
- •
  Distinguish online from offline brute froce
  - •
    Online: attempted directly against a live login (slow, rate-limited, detectable); offline: attempted against a stolen password database (fast, no rate limiting)

Linked references 2