Ravi Sir's Cyber Security Cards › Comparison Cards
Brute Force vs Password Spray
Comparison card: Brute Force vs Password Spray. Easy English, with a real example. Scan the QR for the full lesson.
Read card text
What this card says
What each one is
Brute force: many passwords on one account.
Password spray: one common password across many accounts.
How they differ
Brute force quickly triggers lockout.
Spray avoids lockout because each account sees very few tries.
Example
Microsoft's corporate email was breached by password spraying on an old test account in 2024.
Defence
MFA, banned common passwords, and alert when one IP fails across many users.
Learn more in the lesson: 22.8 Password Spraying