Password hacking attacks

With a brute force attack, an attacker tries all possible combinations of characters until the correct password is found. This is like trying every combination on a lock until it opens. However, this method is time-consuming and less effective against strong passwords.

Unlike brute force attacks that try all possible combinations, dictionary attacks use a list of common passwords or phrases (the ‘dictionary’). If your password is a common word or phrase, it could be vulnerable to a dictionary attack.

A sophisticated form of brute force attack, a rainbow table attack uses precomputed tables (called ‘rainbow tables’) to speed up the cracking process. However, using unique salts (random data added to passwords) can protect against these attacks.

A Keylogger Attack involves malicious software that records your keystrokes. When you type your password, the keylogger records it and sends it to the attacker.

In a Credential Stuffing attack, a hacker uses leaked username and password combinations from one site on other sites, hoping that the user has reused their password.

In Phishing Attacks and Social Engineering Attacks, a hacker tricks a user into revealing her password. In a phishing attack, a user is often directed to a fake login page via an email or message. Social engineering involves manipulating people into divulging their passwords.