← Security+ glossary

Honeytoken (decoy data)

Fake data - a made-up credential, API key or record in a database - placed solely as a trap, because its use reliably signals an intrusion. Legitimate users do not know about it, so any access to a honeytoken means a compromise, with very few false positives.

All Security+ guides →