Honeypot

A honeypot is a decoy system or account set up on purpose to attract attackers, so defenders can watch what they do and learn their methods.

Honeypot: A honeypot is a decoy computer, file or account built to look valuable but with no real data. Defenders place it where attackers may probe, then watch and record their tools and habits. Any touch on it is suspicious, because no real user has a reason to use it.

Security researchers use honeypots to see which attacks are active, such as which passwords are tried against fake servers. Companies may plant fake records or fake admin accounts that raise an alarm when opened. This helps them notice a break-in early, often before real damage is done. Many such traps are also built around exposed cameras and routers, which attackers scan for all the time.

The word is also used in scams, such as a honey trap in romance fraud, where an attractive profile lures a victim. For ordinary users, there is nothing to set up, but it is good to know that stolen data and fake offers can sometimes be bait too. Be wary of unbelievably easy access or free offers. Treat anything that feels like an obvious bargain with the same care.

Tips

• Treat offers that look too easy, such as free paid apps or unlocked accounts, as possible bait.
• Do not use leaked or cracked accounts; they may be traps that track you.
• If you run a small server, ask your provider about alerting on unusual logins.

Related terms