---
schema_version: "1"
id: 03b7c972373746a0c8ba64399f96b52cca2bbf069de5a935ca7f09deebb4924c
title: Detect Leaked Credentials with eCDN Rules
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/262-0-0/rn_b2c_ecdn_leaked_credentials.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_b2c_ecdn_leaked_credentials.htm&release=262.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 9b69c975f09be8fc9ca8a19753f4afb577970f7d49702c45a46014cddc61e783
description: Five new Cloudflare Leaked Credentials Detection fields let you challenge or block login attempts that submit previously exposed credentials.
products:
  - Cross Cloud
release: "262"
---
# Detect Leaked Credentials with eCDN Rules

Five new Cloudflare Leaked Credentials Detection fields let you challenge or block login attempts that submit previously exposed credentials.

**Where:** This change applies to B2C Commerce.

**How:** The Boolean field `cf.waf.auth_detected` indicates that Cloudflare detected authentication material on the request. Under `cf.waf.credential_check`, four additional Boolean fields identify specific risks: `password_leaked`, `username_leaked`, `username_and_password_leaked`, and `username_password_similar`. All five fields are available in the CDN Zones API and in the Business Manager expression editor for Custom Rules and Rate Limits.

#### See Also

- [_Salesforce Help_: Create a Custom Firewall Rule for an eCDN Zone](https://help.salesforce.com/s/articleView?id=cc.b2c_create_eCDN_firewall_rule.htm&type=5&language=en_US)
- [_Salesforce Help_: Create an eCDN Rate Limiting Rule for an eCDN Zone](https://help.salesforce.com/s/articleView?id=cc.b2c_eCDN_create_rate_limiting_rule.htm&type=5&language=en_US)
- [_B2C Commerce Developer Guide_: eCDN Custom Rules](https://developer.salesforce.com/docs/commerce/b2c-commerce/guide/cdn-zones-custom-rules.html)
- [_B2C Commerce Developer Guide_: eCDN Rate Limiting Rules](https://developer.salesforce.com/docs/commerce/b2c-commerce/guide/cdn-rate-limiting-rules.html)