Password spraying tries a few common passwords across many user accounts instead of brute-forcing a single account.
Why it matters:
- Bypasses account lockouts and avoids detection.
- Very effective if users share weak, common passwords.
Pro tip: Enforce strong passwords and MFA systemwide — this makes spraying attempts fail quickly.
« Back to Glossary Index