ConceptOne-time Session
One-Time Login Session
A short-lived login token issued by the server that expires and is typically bound to a device or IP address, used to reduce the risk of credential leakage, as distinct from a long-lived master password.
Timeline (last 90 days)
Nov 1
The master password is the root identity credential; once leaked, an attacker can log in over the long term and from many locations and may laterally modify account settings, whereas a one-time session is usually a short-lived token issued by the server that expires when it lapses and is often bound to a device or IP.
Unverified50%