Glossary: Modern Vulnerabilities, Malware and Physical Attacks

Token

Also written: session token, tokens

A short signed message from the identity provider that says who a user is and when they signed in. Apps accept it instead of asking for a password, so a stolen one is as good as a login.