Breached Credential Protection

This feature helps you detect breached credentials in your Okta environment and customize their remediation.

Okta monitors third-party lists of public data breaches for username-password combinations in your org. When a user signs in, Okta checks if their credentials appear in a list. If so, Okta expires the password according to the password policy configuration, and the results can include user logout, password expiry, and custom workflows. Okta records the security.breached_credential.detected event in the System Log, and the user is required to reset their password the next time they attempt to sign in.