--- title: "What are the best defenses against a brute force login attack?" description: "What are the best defenses against a brute force login attack?" author: "Sandra Emily" published: 2022-05-05 canonical: https://answers.mindstick.com/qa/97139/what-are-the-best-defenses-against-a-brute-force-login-attack category: "troubleshooting" tags: ["troubleshooting", "networking", "network-security"] reading_time: 1 minute --- # What are the best defenses against a brute force login attack? What are the best defenses [against](https://www.mindstick.com/news/2526/resolution-against-anti-satellite-tests-adopted-by-un-to-reduce-space-debris) a [brute force](https://www.mindstick.com/forum/160987/security-practices-like-oauth-api-keys-encryption-ssl-tls-rate-limiting-to-prevent-brute-force) [login](https://www.mindstick.com/blog/206/login_form) [attack](https://www.mindstick.com/blog/300788/why-is-heart-attack-increasing-in-the-younger-generation)? ## Answers ### Answer by Hitesh Vohra - A **brute force attack** is a sort of cyber assault that use a trial-and-error approach to guess all conceivable password, encryption key, or login information combinations. - The easiest and most efficient strategy to stop a brute-force assault is to have a **strong password** policy. - Most websites, especially those powered by WordPress, allow for unlimited **login attempts** by default. If you're a website administrator, you can install a plugin to limit the number of login attempts on your site in order to prevent brute force assaults. - In terms of the second strategy, you should restrict login attempts to users from a specific **IP address** or range. - Your accounts will be more secure with **two-factor or multi-factor authentication.** When logging into an account, 2FA requires a user to verify their identity before being granted access. - 'Completely Automated Public Turing Test to Tell Computers and Humans Apart' is what **CAPTCHA** stands for. \ **Read More: [Define the salting process and what it’s used for.](https://answers.mindstick.com/qa/97142/define-the-salting-process-and-what-it-s-used-for)** --- Original Source: https://answers.mindstick.com/qa/97139/what-are-the-best-defenses-against-a-brute-force-login-attack Copyright © MindStick Software Pvt. Ltd. This Markdown version is provided for developers, AI systems, and offline reading.