A credential export is a file set that contains saved usernames, passwords, session data, or related account records extracted from a browser, password store, application, or compromised system. It may appear as plain text, CSV, JSON, or another archive format, and it can be especially dangerous if it includes reusable passwords or password hashes.
In cyber security, credential exports matter because they can enable account takeover without exploiting software vulnerabilities. Attackers use them for direct logins, password spraying, or pivoting into email, cloud, and business systems where reused credentials unlock more access. Defenders treat these files as high-risk evidence of exposure: they should reset affected passwords, invalidate sessions, check for reuse across services, and limit where sensitive authentication data is stored. When a breach report mentions credential exports alongside payroll, tax, or email archives, it often signals broader identity and fraud risk, not just data theft.