AI & the web
Session hijacking
Taking over another user's authenticated session.
In everyday use
A stolen session token lets an attacker act as a signed-in user.
What to keep in mind
A strong password alone cannot protect a session token that has been stolen.
Also searched as:
Further reading
Original explanation and example by Perspectism. Further reading may cover the wider subject, rather than this exact wording. Edition updated 7 October 2026.
More in ai & the web
Page updated .