Glossary: Identity and Access Management

compromised credential

Also written: compromised credentials

A credential that someone else has, or may have: a phished password, a password in a breach, a stolen token or a leaked API key. The response is to reset it, revoke sessions and tokens, check MFA methods and persistence, read the sign-in log and fix the cause.