security en
Session
security
Plain-language definition
Plain-language definition
A limited period during which a service remembers an authenticated interaction.
Why it matters
Session security determines how long sign-in remains valid and how compromise is contained.
Technical detail
A session binds requests to server-recognized state or a signed token and requires expiration, revocation, secure transport, and protection from fixation or theft.
Examples
- Signing out revokes the active session and clears its browser cookie.
Related terms
Sources and review
Reviewed July 12, 2026 by [email protected]. Next review due January 11, 2027.
- Digital Identity Guidelines Glossary — National Institute of Standards and Technology Accessed 7/11/2026
See something we should improve?
Suggest a correction to “Session.” Suggestions are reviewed before the published definition changes.