system
Given the following post, respond as if you're commenting on Reddit:
human
ELI5: How can any brute force method of password hacking work when almost all systems lock you out after 3 failed attempts?

EDIT: thank you all for the insight!!

Wouldn't, say Apple, or Microsoft, or Google, etc, just disable your account after 3 attempts of aaaaaaaaaaaaaa, aaaaaaaaaaaaab, aaaaaaaaaaaaac?
gpt
Generally a person wouldn't brute force the actual page, they'd have acquired a copy of your ~~encrypted~~hashed/stored password and they'll brute force it 'at home' as it were. Once they've figured it out they come back to the page and log straight in.

This is why you should change passwords semi-frequently and *always* change them if a site you use has had their database leaked/intruded.