Credential enrollment is the process of adding a new login method or authenticator to an account, such as a passkey, security key, or other second factor. It is more than a setup step: it changes which credentials the account will trust in the future.
In cyber security, enrollment matters because attackers may abuse it to create their own trusted access instead of stealing an existing password. If a phishing page or social-engineering flow convinces a victim to approve a new authenticator, the attacker can gain persistence even after the password is changed or sessions are revoked. Defenders should treat enrollment as a privileged security event, with alerts, step-up verification, and an audit trail that lets responders review and remove recently added credentials. Watching credential enrollment helps close a common gap between account recovery and account takeover.