Glossary
Default Credential
A default credential ships preconfigured on a device or a newly created account, intended purely as a placeholder to be changed before the device or account enters real use. In practice, this final step is skipped often enough, and the same default credentials are widely enough known or trivially discoverable, that a meaningful share of deployed devices and accounts remain accessible using nothing more than publicly documented factory settings.
The risk compounds specifically at scale: a single default credential, once known, doesn't just expose one device — it exposes every device shipped with the same unchanged default, which is precisely what makes this such a consequential and recurring category of failure across large fleets of similar devices rather than an isolated, one-off oversight.