Glossary: Threat Vectors: Files, Networks and Endpoints

session token

Also written: session tokens

A long random value, usually inside a cookie, that means 'this browser already logged in'. A stolen token skips the password and MFA, so you must revoke sessions, not just reset the password.