What is Brute-force attack?
Guessing a password by trying every possible combination, at machine speed.
Computers can try billions of guesses per second against short passwords, but each extra character multiplies the work enormously. A long passphrase pushes cracking time from minutes to centuries — length is the defence.