A dictionary attack uses a list of words that are most likely to be used as passwords. This list can be compiled from numerous sources and can be customized to target specific users based on their personal information or commonly used password patterns. Unlike brute force attacks that try every possible combination, dictionary attacks are more efficient by using a curated set of potential passwords.