Credential stuffing uses stolen username/password pairs from data breaches to break into other accounts where users reused the same credentials.
Why it matters:
- Extremely common because many people reuse passwords across services.
- Hard to detect because login attempts look legitimate.
Pro tip: MFA is the #1 defense — even stolen passwords won’t work without the second factor.
« Back to Glossary Index