A brute force attack is a trial-and-error method used to decode encrypted data such as passwords or PINs, by systematically checking all possible combinations until the correct one is found. While effective against weak passwords, it is time-consuming and easily thwarted by strong encryption algorithms and security measures like account lockouts and rate limiting.