

Those results are why I prefer long-term solutions like a multifactor authentication solution. However, this is time-consuming and unreliable, and the only statistically significant studies I found on deploying this type of attack showed significant (but sometimes temporary) losses. This is the process commonly referred to as "burn the eff out of a key", or setting the browser to turn off JavaScript, so it won't try anymore.

One method is to try hundreds or thousands of combinations.

There are several ways to try to brute-force crack a specific password. If it takes more than 10s seconds you should stop. This is easy: if it can be found in less than 1s or 2s, it's found. In cryptography, a brute-force attack is a cryptanalytic attack that can, in theory, be used against any encrypted data (except data encrypted in an information-theoretically secure manner). A brute-force attack is a trial-and-error technique used to find the correct key for a cryptographic system.
