Abstract
Krakencreds are a new cybersecurity framework that aims to make the phishing of credentials implausible for most attackers. A set of "fake credentials" (Krakencreds) can be generated by a conscious victim of such an attack which, when tried by the attacker or their bot, trigger a permanent ban of their device from the site. This disclosure outlines ways to increase their effectiveness, prevent their exploitation, reduce user friction and handle exceptions.
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Recommended Citation
Vallejo, Ignacio, "Krakencreds: a cybersecurity framework to prevent credential phishing", Technical Disclosure Commons, (July 20, 2026)
https://www.tdcommons.org/dpubs_series/11053
COinS