Brute force cracking Protection

Today, a friend suddenly asked me on QQ that the website was attacked and the content of the whole website was replaced with illegal information. After hearing the news, I was shocked. As a result, I quickly found out that the management password of the website was too simple and was cracked by brute force .. I would like to share my experiences on preventing brute-force cracking with my friends. First, we recommend that you use complex character combinations, such as numbers and English case combinations .. Advice to developers: 1. Establish a verification code mechanism. Although the verification code can also be cracked, it also increases the difficulty of brute-force cracking to a certain extent. 2. Establish a complete security mechanism against brute-force cracking, if an error occurs three times in a row, the account is locked and cannot be logged on again within 24 hours;
Third, if the user is bound with an email or mobile phone number, an abnormal logon reminder can be sent to the account owner to unlock the account.