eli5: how does “brute forcing” a password work?

805 views

So I get the more complicated and long the password the harder it is to brute force, but do these programs start with like 111aaa and then go to like 111aab and so forth. Or, are they just trying every combination randomly? If the latter, isn’t there a chance (a very small one) that if it is kinda random that they could break a really good password on like the first try? Similar to winning the lottery? If it’s not random, that has its own issues. I don’t get it. Help.

In: 0

14 Answers

Anonymous 0 Comments

Generally speaking brute force password hacking isn’t going to be that successful against a specific account, especially for any site that has any basic countermeasures like a cooldown between attempts. Yes, typing in a random password could result in you getting in.

However, there’s multiple ways to do it. For example a large majority of people use simple passwords like “password” to secure their account. By trying all the most common passwords first and then adding a dictionary to the list you can get into a lot of accounts. Unless you really need to get into a specific account if you try a ton of accounts chances are you’ll get into quite a few quickly.

You are viewing 1 out of 14 answers, click here to view all answers.