Credential stuffing is a big way attackers get into accounts that are not their own. They find a list of compromised credentials—often on the Dark Web for a tiny sum—then try the same information for various accounts that interest them. Credential stuffing takes advantage of the fact that many people reuse their passwords across several accounts.

Credential stuffing attacks make up a huge percentage of overall login attempts. In some countries—including the US—there are more false attempts at logging into accounts than legitimate ones. Globally, credential stuffing attacks account for 34% of all login attempts.

To render credential stuffing attacks powerless:

1. Use unique passwords for each account. This attack relies of password reuse. Need tips on how, or having trouble keeping track of them all? Click over to our Password Management Made Easy blog.
2. Use great password habits like changing passwords immediately if you are informed of a breach. Credential stuffing only works if the credentials they try are valid.
3. Enable MFA wherever possible. Multifactor authentication adds a valuable layer of security to your accounts. Even if a criminal gets their hands on a set of your credentials, they will need another form of authentication before they are allowed to access your accounts.

Want to know more about credential stuffing?

Get more details from Bleeping Computer’s original post.