Credential
Whatever proves you're you — username+password, API key, certificate, biometrics.
"Credential stuffing" is when attackers try leaked passwords against other sites (people reuse passwords). Defences: unique passwords per site (password manager), MFA, anomaly detection.