Weak passwords can easily be guessed by hackers in brute force attacks. They use bots that have a database of commonly-used passwords. These bots can guess weak passwords in a matter on minutes, sometimes even seconds.