Cybersecurity

What is Honeypot?

Quick answer

A decoy system or resource deliberately set up to attract attackers so their methods can be detected and studied.

Honeypot, explained

A honeypot looks like a real target, such as a server with weak credentials, a fake database, or an exposed device, but it has no legitimate business use. Because no ordinary user should touch it, any interaction is a strong signal of malicious activity.

Security teams use honeypots to detect intruders inside a network early, divert attackers away from valuable systems, and gather intelligence about tools and techniques. Researchers run large networks of honeypots on the internet to track botnets and new malware. Variations include honeytokens, such as fake credentials planted in files, and honeynets made of multiple decoys. Honeypots must be carefully isolated so attackers cannot use them to reach real systems.

Related terms

Guides that mention Honeypot