While a dictionary attack can be done manually by an individual, it is easily done via software and a database with millions of words. See brute force attack and Captcha. THIS DEFINITION IS FOR ...

Creating a custom password-exclusion list can help prevent employees from using passwords that are likely to be guessed.