---
id: 5809
title: "Password Spraying Explained"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/password-spraying-explained/"
published_at: "2025-02-22T20:48:39Z"
tags: ["active-directory", "credential-security", "entra-id", "detection", "mfa", "password-spraying"]
phying_url: "https://phying.com/item/5809"
lang: en
---

# Password Spraying Explained

## Summary

Password spraying tries a few common passwords across many accounts to evade lockouts, targeting VPNs, Citrix gateways, and Entra ID tenants. Defenses include MFA and passwordless; DSP can detect it.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2025-02-22T20:48:39Z
- **Original:** https://www.semperis.com/blog/password-spraying-explained/
- **Phying News:** https://phying.com/item/5809