In a brute force attack, criminals try to figure out passwords or keys by automated, random trial and error of different strings of letters or characters. Long keys, complex passwords, and limiting the number of failed attempts provide protection against brute force.