Honeytoken

Updated 31 Jul 2026

•
def
- •
  traceable fake data planted within a honeynet, so that if it's stolen, defenders can identify where it came from and how it was used
•
examples
- •
  API credentials that don't actually grant access but trigger a notification when used; fake email addresses added to a contact list to monitor for later spam/leaks; database records, browser cookies, or web page pixels
•
related
- •
  Deception and Disruption
- •
  Honeynet
•
cards
- •
  Distinguish a honeytoken from a honeyfile
  - •
    A honeyfile is bait content (like passwords.txt) that alerts when accessed; a honeytoken is traceable fake data (like fake credentials) that identifies who/how it was used if stolen

Linked references 2