Brute force
Guessing a password by trying every possible combination until you hit the right one.
An 8-character password with all symbols has ~6 quadrillion combinations — a modern GPU can guess billions per second. Defences: long passwords, rate limiting, lockouts, 2FA.