What is Dictionary attack?
Guessing passwords using lists of common words, names, dates, and previously leaked passwords.
Attackers do not guess randomly — they start with 'password123', pet names, sports teams, and millions of real passwords from past breaches. That is why 'Liverpool2024!' is weak despite the symbol, and four random unrelated words are strong.