---
title: cf.waf.credential_check.username_leaked · Cloudflare Ruleset Engine docs
description: Indicates whether the username detected in the request was previously leaked.
chatbotDeprioritize: false
source_url:
  html: https://developers.cloudflare.com/ruleset-engine/rules-language/fields/reference/cf.waf.credential_check.username_leaked/
  md: https://developers.cloudflare.com/ruleset-engine/rules-language/fields/reference/cf.waf.credential_check.username_leaked/index.md
---

# cf.waf.credential\_check.username\_leaked

`cf.waf.credential_check.username_leaked` Boolean

Indicates whether the username detected in the request was previously leaked.

Requires a Cloudflare Enterprise plan. You must also enable [leaked credentials detection](https://developers.cloudflare.com/waf/detections/leaked-credentials/).

Categories:

* Request
