The term "credential stuffing" was coined by Sumit Agarwal, a former Deputy Assistant Secretary of Defense under President Obama. In 2011, while working at the Pentagon, Deputy Assistant Secretary Agarwal discovered that hackers began using surnames and passwords stolen from one site to gain access to other sites. These attacks are currently a massive problem and they started to happen more often during COVID-19 pandemic. How to prevent and defend against it?