Glossary: Security+ Exam Prep 3: Practice Exams

session token

Also written: session cookie, session key

A value that proves a login already happened, so a stolen one lets an attacker act as the user without a password or MFA. A session key only encrypts a connection's traffic.