Glossary: Endpoint and Application Security

session cookie

Also written: session

The cookie a web app uses to recognize a logged-in user, so stealing it means stealing the login. Flask signs it, but its contents can still be decoded.