Hello Helina ,
Brute-force attack means to guess random passwords to get access control to your
server. Attackers don't decrypt any information but continue to try different passwords using scripts or attacking tools. Basically attackers use dictionary of all words or common passwords and also uses programs that runs through all letters or numbers until it gets the correct match.
To prevent brute-force attacks you should increase the length of passwords with special characters in it and Lock the account after three login failed attempts.
Please let us know if you have any more doubts.