Brute Force Protection

Difficulty: Beginner

Question

Why is it important to use a delay or lockout after failed login attempts?

Answer

To significantly increase the time it takes for an automated tool to guess a password (brute-forcing), making the attack impractical.

Concepts covered

Auth, Security