The Numbers Game

• Most users, if left to their own devices, generally will not choose complex passwords themselves, instead opting for single dictionary words not using capitalization or special characters.

• These types of passwords require much less effort (and time) to crack than brute-forcing the key space if using an optimized dictionary attack method.

• For these reasons, most modern attacks on authentication systems target guessing the user’s password first before attempting to brute-force the password.