{"id":2783,"date":"2018-09-06T11:19:49","date_gmt":"2018-09-06T11:19:49","guid":{"rendered":"http:\/\/rh01.co.uk\/?p=2783"},"modified":"2026-01-23T21:11:25","modified_gmt":"2026-01-23T21:11:25","slug":"protecting-password","status":"publish","type":"post","link":"https:\/\/www.20i.com\/blog\/protecting-password\/","title":{"rendered":"Protecting your password from brute-force attacks"},"content":{"rendered":"\n

StackProtect is a security tool<\/a> from 20i that protects website passwords.<\/strong><\/p>\n\n\n\n

One of the most common and easy ways to compromise a website is to guess the password for login to its content management system (CMS). For example, \/wp-admin <\/em>for WordPress.<\/p>\n\n\n\n

Malware will use trial-and-error to try to guess your password. <\/p>\n\n\n\n

It might start by cycling through variants of the most common passwords. This is known as a dictionary attack<\/strong>: where the code cycles through all the words in a ‘password dictionary’, using common words and passwords that have been used already elsewhere.<\/p>\n\n\n\n

\"Most<\/figure>\n\n\n\n

<\/p>\n\n\n\n

It’s why it’s you should use a unique, secure password: one that is truly random. This makes them difficult to remember – unfortunately – but there are password managers that can help with this.<\/p>\n\n\n\n

Then there is the traditional brute force attack<\/strong>, where the code tries every  character combination in sequence. Even if your password is random, these types of attacks stand a good chance of guessing it right, given time.<\/p>\n\n\n\n

How StackProtect protects your password<\/h2>\n\n\n\n

StackProtect monitors requests to common login pages. When a request is made, it looks at a number of things:<\/p>\n\n\n\n