Let's say you forget the password to your old email account, and you sit there trying every combination you can think of—birthdays, pet names, your go-to "123456". That, in a nutshell, is how a brute-force attack works… just on a much, much bigger scale.