Account Enumeration
Noun · Security & Infosec
Definitions
A technique for discovering whether specific user accounts exist by observing differences in responses, timing, or error messages during login, signup, or recovery flows. Preventing account enumeration is important because it helps stop targeted credential attacks.
In plain English: A way attackers figure out which user accounts exist.
Example: "The password-reset page leaked account enumeration by telling attackers which emails were registered."