Brute Force Attacks - Word Drop

Most computers and online accounts are protected by passwords. A strong password is hard to ______. Someone guessing by hand is far too slow to be a real risk. The real danger is when a machine can test millions of attempts every second. A ______ attack uses automated software to work out passwords, passphrases and PINs by trial and error. Attackers may try many passwords against one ______, the account name that identifies a user.

A successful attack lets criminals steal personal information, take over accounts and websites, or damage an organisation's ______. The most ______ passwords include 123456, password123 and people's own names, which are guessed almost instantly.

Many failed ______ on one account in a short time can be a sign of a brute force attack. Strong passwords help. Make them at least 8 ______ long and mix uppercase letters, lowercase letters, numbers and symbols. Each extra character multiplies the number of possible ______, so guessing takes far longer. Turning on ______ authentication means a guessed password is not enough, because the attacker also needs a code sent to your phone. Systems can also limit login attempts and ______ an account after a few wrong tries.

Two-factor authentication uses two ______ types of factor: something you know, such as a password, and something you ______, such as a one-time code sent to your mobile. Using two of the same type, such as a password and a PIN, is two-______ authentication, not two-factor.