Password Spray Attack A password spray attack is an attempt to try commonly used passwords against a list of user accounts.