---
title: cf.waf.credential_check.username_password_similar · Cloudflare Ruleset
  Engine docs
description: Indicates whether a similar version of the username and password
  credentials detected in the request were previously leaked.
chatbotDeprioritize: false
source_url:
  html: https://developers.cloudflare.com/ruleset-engine/rules-language/fields/reference/cf.waf.credential_check.username_password_similar/
  md: https://developers.cloudflare.com/ruleset-engine/rules-language/fields/reference/cf.waf.credential_check.username_password_similar/index.md
---

# cf.waf.credential\_check.username\_password\_similar

`cf.waf.credential_check.username_password_similar` Boolean

Indicates whether a similar version of the username and password credentials detected in the request were previously leaked.

Requires a Cloudflare Enterprise plan. You must also enable [leaked credentials detection](https://developers.cloudflare.com/waf/detections/leaked-credentials/).

Categories:

* Request
