{"id":557,"date":"2026-10-26T03:48:46","date_gmt":"2026-10-26T03:48:46","guid":{"rendered":"https:\/\/sitefitters.com\/learn\/glossary\/brute-force-attack\/"},"modified":"2026-10-26T03:48:46","modified_gmt":"2026-10-26T03:48:46","slug":"brute-force-attack","status":"publish","type":"page","link":"https:\/\/sitefitters.com\/fr\/learn\/glossary\/brute-force-attack\/","title":{"rendered":"Brute-force attack"},"content":{"rendered":"
Learn<\/a> \/ Glossary<\/a> \/ Security & Backups<\/a><\/div>

Brute-force Attack Explained.<\/em><\/h1>
In one sentence<\/small>A brute-force attack is an automated attempt to break into an account by guessing usernames and passwords over and over until one works.<\/div><\/div><\/section>

What It Is<\/h2>

In a brute-force attack, software tries thousands of password guesses against a login page, one after another. It is like a burglar with a giant ring of keys trying each one in your front door. Attackers often start with common passwords and ones leaked from other websites. WordPress login pages are frequent targets because their address is predictable on most sites.<\/p>

Why It Matters for Your Business<\/h2>

If an attacker guesses an administrator password, they control your whole website. They can add malware, change your phone number, or lock you out entirely. Even failed attempts cause harm, since a flood of login requests can slow a small site down. A dental office might notice its website crawling every evening without realizing bots are hammering the login page.<\/p>

Good to Know<\/h2>

Use a long, unique password for every admin account, stored in a password manager, and turn on two-factor authentication. Limit login attempts so an address gets temporarily blocked after several failures. Remove old user accounts for past employees or contractors. Avoid using "admin" as a username, since it is the first name attackers try.<\/p>

Related terms<\/h4>
Two-factor authentication<\/a>User roles<\/a>Admin dashboard<\/a>Firewall<\/a>CAPTCHA<\/a><\/div><\/div>