Disclosed are various embodiments for separating security credential verification. A first authentication service receives a first security credential from a client. The first authentication service also receives an encrypted version of a second security credential from a second authentication service. The first authentication service determines a stored encrypted credential corresponding to the second security credential based at least in part on the first security credential. The first authentication service authenticates the client by comparing the encrypted version of the second security credential to the stored encrypted credential.