Glossary: Application and Credential Attacks, and AI Risks

session token

Also written: session ID, token, tokens

The value a service uses to remember a signed-in user, usually stored in a cookie. Whoever holds it is treated as signed in until the session ends, even after a password reset.