← Back to glossary

📦

Credential Stuffing

Threats

Account Takeover Two-Factor Authentication (2FA) Password Reuse Password Leak

Trying leaked passwords on other sites.

Definition

Credential stuffing is when attackers use leaked username+password lists and try them on many services, hoping people reused passwords.

In plain English Trying leaked passwords on other sites.

Why this matters

Why it matters: Password reuse turns a single leak into many hacked accounts.

Example

Example: A leaked email/password combo is tested on banking, shopping, and social sites.