thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Intermediate

Honeytoken

A fake credential, record or data item planted to detect unauthorized access or use.

Definition

Honeytokens include fake AWS keys, decoy database records, fake user accounts and canary URLs. Any use of them indicates compromise because they have no legitimate purpose. Services such as Canarytokens make them easy to deploy.

Example

A fake AWS access key in a developer's config file that alerts when anyone tries to use it.

Exam tip

Honeytoken use is a high-fidelity indicator of compromise.

Related terms