Session token

Also written: token

A long random value in a cookie that the server links to your account, so whoever presents it is you. Protect it with HTTPS, short sessions, real logout and a new token at every login.