
Account lockout is another way to prevent the attacker from performing brute force attacks on web applications. This makes it hard for attackers to guess the password, and brute force attacks will take too much time. To prevent password cracking from brute force attacks, one should always use long and complex passwords.

These attacks can take several minutes to several hours or several years, depending on the system used and length of password. However, this traditional technique will take longer when the password is long enough. In a traditional brute force attack, the attacker just tries the combination of letters and numbers to generate a password sequentially. If this dictionary contains the correct password, the attacker will succeed. The attacker tries these passwords one by one for authentication. In this, the attacker uses a password dictionary that contains millions of words that can be used as a password. The most common and easiest to understand example of the brute force attack is the dictionary attack to crack passwords. If it is larger, it will take more time, but there is a better probability of success. Success depends on the set of predefined values.


A brute force attack when an attacker uses a set of predefined values to attack a target and analyze the response until he succeeds.
