Search code examples
securitybrute-forceowncloud

Is the Owncloud password secure against brute force attack?

I'm using owncloud as my personal cloud storage, at home. I read "Brute force attacks on passwords are guaranteed to succeed" from Brute Force Attack[Wikipedia].

Is it true? Any one who can brute force attack, can access my data on owncloud server? I mean the login password on mobile or webserver page.

Thank you

Solution

  • A brute force attack will always succeed. But depending on your password it may take thousands or millions of years.

    A brute force attack just tries every possible combination of password and hopes to guess the correct one. You may reduce the risk of the attacker guessing your password by using a long, complex one. Also you might be able to configure owncloud in such a way that it makes the brute force attack even more difficult. For example, let the user wait 10 minutes after 3 failed login attempts.