Session
The period during which a user stays logged in without entering their credentials again.
Definition
After login the server creates a session, usually tracked with a cookie or token. Sessions should expire after inactivity or logout, and should not survive in ways that put the user at risk. Testers check expiry, logout on all devices and the back button after logout.
In practice
After tapping Log out, pressing the browser back button should not show the account page again.
Learn it in context
Lessons that use this term.