Credential brokering is the role of a system or service that securely stores, injects, or relays credentials so users or administrators can access remote systems without handling each secret directly. Remote support platforms and privileged access tools commonly broker passwords, keys, or tokens for managed sessions.
This role makes access easier to control and audit, but it also makes the broker a high-value target. If attackers compromise it, they may be able to expose stored secrets or misuse access paths to reach connected systems. Defenders should restrict and monitor the broker, review session and administrative logs, and rotate brokered credentials if compromise is suspected. Compromise of a broker does not by itself prove that every stored credential was stolen or used.