Definition
Credential Movement
The ability of an authentication credential to be copied, transmitted, stored on a new device, or used in a location other than where it was created. Passwords, API tokens, session cookies, TOTP codes, and QR codes are all movable credentials - they can be phished, stolen from memory, captured in transit, or replicated by an attacker. Jasson Casey's insight: credential movement is the root cause of approximately 80% of security incidents (per multiple annual threat reports from CrowdStrike, Mandiant, and Verizon DBIR). Device-bound credentials eliminate movement by design: the private key is stored in a hardware enclave and can never leave. If a credential cannot move, it cannot be stolen - and the dominant attack chain collapses.
From the episode “Agentic AI, Deepfakes, and the End of Passwords”Hear it on the podcast1 episode
Learn the language of AI-native founders
Every week: the new terms, tools, and workflows founders are using, straight from the podcast.