SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/secplus-password-spraying

Trying one common password against many different accounts is called what?

Password spraying, one password, many accounts.

Start playing free

  1. Credential stuffing
  2. A dictionary pass
  3. Password spraying ✔

Why: Spreading attempts across many accounts helps attackers avoid lockouts that trip after repeated failures on a single account.

Huh, didn't know that: MITRE ATT&CK says the sprayed password may match the domain's complexity policy, like Password01.

The dad joke
Yesterday I decided to change my WiFi name to "Hack me if you can" and when I woke up this morning I saw the name changed to "Challenge accepted" somebody help.
Like this card?
Play the game

References

Answer: Password spraying. Spreading attempts across many accounts helps attackers avoid lockouts that trip after repeated failures on a single account.

  1. MITRE ATT&CK T1110.003, Password Spraying attack.mitre.org/techniques/T1110/003
    Password spraying uses one password (e.g. 'Password01'), or a small list of commonly used passwords
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyTrying stolen username and password pairs from one breach against other websites is called what?Security & PrivacyWhich control limits how many failed login attempts can be made on an account?Security & PrivacyEncrypting a laptop's files mainly protects which part of the CIA triad?

That's stuff everyone should know.