When you’re starting up or restarting your Mac, everyone knows you’ll need to log in to a user account to continue the startup process. This involves selecting a user account on the Mac and then entering a password. Even if you have Touch ID enabled, macOS will force you to type in your password following a reboot as an extra security measure.
If you’re following good security practices, you’ve created a strong password, one that’s practically impossible to figure out in a few seconds or minutes. The one thing about strong passwords is that they can be tricky to type–you’re bound to make a mistake when typing in a passworld like, “T+|Il1imnS∫$&:;,.”
When you enter an incorrect login password, you’ve probably noticed that the macOS login box pauses for a second or two and then shakes before you can try again. It’s a brief pause, but it can seem like a maddening one, especially since it instantly logs you in when you get it right. Why does it pause? Aren’t we in an era where Macs immediately know when you’ve typed in the wrong password?
That pause is there by design–it’s an important security measure. It’s there to discourage brute force attacks, multiple attempts per second by an unauthorized user to guess your password. You know how you get annoyed by that pause before you can make another attempt to type your password? Imagine how a threat agent feels during that pause. If that threat agent is using automated tools for a brute force attack, the pause cuts down the number of attempts that can be performed, thus cutting down the chances of figuring out your password.
Of course, Apple also has security to prevent bad actors from working around this, too. After four wrong attempts, your Mac will lock for a minute; after five attempts, it’ll lock for five minutes; after six attempts, 15 minutes; all the way up to eight hours after nine attempts. Get it wrong a 10th time, and you’ll be locked out for good.
So, the next time you miss on your password entry, and you’re anxiously awaiting for the password box to stop shaking, just remember that the Mac is doing that as a precaution. Be glad that someone’s looking out for you. After all, it’s a really quick pause that goes a long way to keeping your Mac safe.
