Creating a barrier that automated "crackers" cannot bypass even with the correct password. Risks to the User
Restricting the number of login attempts from a single IP address.
Implementing challenges (like Arkose Labs) that are difficult for automated scripts to solve.