← Back to glossary
🧪

Password Leak

Threats

Credential Stuffing Strong Password Data Breach Hashing

Exposure of password material or password hashes.

Definition

A password leak is unauthorized disclosure of password secrets or password-verifier material (hashes, salts). Impact depends on hashing strength and user reuse.

In plain English Exposure of password material or password hashes.

Why this matters

Why it matters: It enables offline cracking, credential stuffing, and broad account compromise.

Example

Example: Exfiltration of salted password hashes from a compromised authentication database.