A brute-force attack is a recursive trial-and-error method used to determine information such as a user password or personal identification number (PIN). The attacker systematically checks all possible passwords and passphrases until the correct one is found. The attack is carried out using an automated software that generates a large number of consecutive guesses as to the value of the desired data.