Credential handling is how software stores, protects, uses, and passes secrets such as passwords, API keys, and access tokens. Good handling limits exposure through measures such as encryption at rest and in transit, restricted access, careful logging, and secure secret storage.
It matters because stolen or exposed credentials can let attackers access connected services or impersonate users. Automation platforms may need credentials to run workflows across multiple systems, so insecure storage, overly broad permissions, or secrets leaked in logs can expand the impact of a vulnerability. Defenders should restrict who and what can use credentials, rotate exposed secrets, and review access and logs after a suspected compromise.