Access Token

Definitions

1. A credential used by a client or service to access protected resources on behalf of a user or itself, often with scoped permissions and limited lifetime. In OAuth-style systems, access tokens are distinct from refresh tokens and session cookies.

   In plain English: A credential that lets a system access protected resources.

   Example: "The mobile app exchanged the auth code for an access token before calling the API."

Related Terms

• JWT
• OAuth
• OIDC
• Account Lockout
• Authorization Code
• Authorization Server
• Brute Force Protection
• Challenge Token
• Code Flow
• Consent Phishing
• Credential Cache
• Face ID Security
• Identity Management
• Identity Verification
• Long-Lived Token
• Masquerade Attack
• MPA
• Out-of-Band Channel
• Proxy Authentication
• Auth Dance