Skip to content

Glossary: Web App Security and Authentication

Reset token

Also written: password reset

A random, single-use, short-lived value in a password-reset link, with only its hash stored. A reset is a second way into every account.

Where the book teaches it

Related terms

Account enumeration