Session Hijacking Glossary Definition

Session hijacking is also known as cookie hijacking. It is an exploitation of a valid computer session, sometimes also called a session key, to gain unauthorised access to sensitive information or services in a computer system or network.

See also: Session Hijacking.

Session Hijacking is a Web security or Internet privacy concept used to protect users, sessions, resources, or browser interactions from misuse.

In security and compliance work, this term helps teams describe controls, risks, identity practices, standards, audits, or protective technologies. It is relevant when managing access, reducing exposure, documenting safeguards, or demonstrating accountability.

Security teams, developers, and site owners use this concept when reducing risk in browser sessions, authentication flows, embedded content, and public-facing applications.

Related concepts include Authentication, Transport Layer Security and Cookie.

Additional Resource: MDN Web Docs Glossary.