Credential and Password Reuse

What this white paper covers:

• ✓
  How bad reuse really is

  52% of US consumers reuse a password across two or more accounts. 13% admit to using the same password across all of them.

• ✓
  Credential stuffing as a gateway

  Why reuse turns a breach at an unrelated site into an attack on yours, with no work required from the attacker.

• ✓
  Who gets blamed

  Consumers attribute account takeover to the site or app, not to their own reuse — which makes it a brand risk, not just a security one.

• ✓
  Detecting the attack

  The signals that distinguish systematic credential testing from legitimate login traffic.