Detecting attacks on secured computer resources, including gathering user security data for a user having a user password protecting resources on a computer system; generating an alert password that is easier to crack than the user password; and deploying the alert password on the computer system for use in detecting password attacks on the protected resources. Generating an alert password that is easier to crack than the user password in some embodiment further comprises: generating an alert password having a cracking difficulty; attempting to crack the alert password and the user password until one cracks; and if the user password cracks first, repeatedly carrying out the following steps so long as the user password continues to crack first: generating an alert password having a reduced cracking difficulty; and attempting to crack both the alert password having a reduced cracking difficulty and the user password until one cracks.