---
title: cf.waf.credential_check.password_leaked · Cloudflare Ruleset Engine docs
description: Indicates whether the password detected in the request was previously leaked.
chatbotDeprioritize: false
source_url:
  html: https://developers.cloudflare.com/ruleset-engine/rules-language/fields/reference/cf.waf.credential_check.password_leaked/
  md: https://developers.cloudflare.com/ruleset-engine/rules-language/fields/reference/cf.waf.credential_check.password_leaked/index.md
---

# cf.waf.credential\_check.password\_leaked

`cf.waf.credential_check.password_leaked` Boolean

Indicates whether the password detected in the request was previously leaked.

Only available when [leaked credentials detection](https://developers.cloudflare.com/waf/detections/leaked-credentials/) is enabled.

Categories:

* Request
