> For the complete documentation index, see [llms.txt](https://knowledge.whiteintel.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://knowledge.whiteintel.io/your-dashboard/credentials.md).
# Credentials
The Credentials tab of the Dashboard lists the leaked credential records for the selected domain or watchlist group. It merges consumer and corporate records into one feed and lets you filter, sort, and drill into any record.
**Availability:** All plans. CSV export of raw records requires an organization account on an Enterprise or Threat Intelligence subscription.
### Reading the table
Each row represents one leaked record and shows the leaked account, the application or URL it was captured on, the record class, the source type, and when it was last seen. In group views, a source column indicates which member domain the record belongs to. The header reflects the active record class, for example "Consumer Credential Records for example.com".
### Filtering and sorting
The filter bar provides:
* **Records** — All, Consumer, or Corporate. This is a client-side filter applied to the loaded feed.
* **Log type** — All, Stealer, Combolist, or Database, sent to the backend.
* **Show latest added** — one-click predefined views that narrow to a record class and sort by date added.
* **Sort by** — Log date or Latest added.
A Reset control clears the active filters.
### Record detail
Selecting a record opens the shared detail sidebar, which presents the device metadata and the exposed credentials. See Viewing logs and record detail.
### Exporting
The **Export** button opens a slide-over that exports the full record set server-side as a CSV file. The export is billed against your organization's export credits and requires an Enterprise or Threat Intelligence subscription. You choose the record type, a date range, and optional infected-system columns. See CSV exports and export credits.