A brute-force attack is when an attacker repeatedly tries multiple combinations of a user's password to gain unauthorised access to their accounts or devices.