thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Intermediate

Credential Stuffing

Automated use of username-password pairs leaked from one breach to log in to other services.

Definition

Credential stuffing exploits password reuse across sites. Attackers use bots and proxies to test millions of pairs. MFA, breached-password detection, bot management and rate limiting mitigate it.

Example

Using a combo list from a retail breach to log in to banking accounts.

Exam tip

Stuffing uses known valid pairs from other breaches; spraying guesses common passwords.

Don't confuse it with

Related terms