A brute force attack automatically tries thousands of username and password combinations until it finds the right one. Long passwords, lockout after several failed attempts and multi-factor authentication stop it.
Related term in this glossary: MFA (multi-factor authentication)
brute force, dictionary attack, password guessing, credential stuffing