If site requires authentication, you are good target for bruteforce attack.
A common threat web developers face is a -guessing attack known as a brute force attack. A brute-force attack is an attempt to discover a by systematically trying every possible combination of letters, numbers, and symbols until you discover the one correct combination that works. If your website requires authentication, you are a good target for a brute-force attack.
An attacker can always discover a through a brute-force attack, but the downside is that it could take years to find it. Depending on the ’s length and complexity, there could be trillions of possible combinations.