Credential
Information used to prove identity or authority, including passwords, API keys, access tokens, certificates, and other authenticating material.
What it is
A credential is evidence a system uses to identify a caller or decide what that caller may do. Some credentials identify a human, while others identify an application or device. Credentials may be secrets, but the broader term also covers non-secret artifacts such as certificates or public keys; in every case, their permissions and lifecycle need to be managed deliberately.
How it relates to Orbit
Orbit’s Security audit records exposed credentials as findings and asks you to confirm rotation or revocation with the provider. See /docs/concepts/security/ for details.
When you would use it
You use credential language when discussing the full lifecycle of authentication material rather than one specific format such as an API key or token.
Common operations
- Issuing credentials with only the access a person, service, or device needs.
- Auditing where credentials are stored, who can use them, and when they should be revoked or rotated.
Related terms
Where this is taught
No learning path uses this term yet. Browse the Learning Atlas for guided sequences through related ideas.