What is Credential Stuffing?

Credential stuffing is a common cyberattack where an attacker attempts to gain unauthorized access to multiple platforms by using compromised credentials.

Example:

If you register on multiple websites with the same email and password:

Email: abc@xxx.com

Password: Abc?123@ (which seems complex but is reused across many sites)

If one site (like Site A) experiences a data breach and hackers acquire this email and password, they will attempt to log in on various other sites (like B, C, D) using the same credentials. This could result in theft of accounts that you use on those sites, and if any of them contain funds or personal information, you may face significant losses.

How to Avoid Credential Stuffing?

1. Enable Two-Factor Authentication (2FA)

We strongly recommend activating 2FA tools such as Google Authenticator, SMS verification, or Passkeys to enhance your account security.

🔗 Explore more: How to Set Up Two-Factor Authentication (2FA) on CoinEx >>

2. Use strong passwords and change them regularly

Avoid simple or easy-to-guess passwords (such as birthdays, mobile numbers, or sequential numbers). Change your passwords periodically to reduce the risk of being compromised.

3. Use different credentials for different platforms

When registering a new account, do not reuse the same email and password as other accounts. Avoid sharing login credentials across different platforms to prevent a single breach from affecting all your accounts.