🛡️ Security

Authentication Override Cookie

An encrypted cookie a VPN portal or gateway issues after a successful login so the client can reconnect without re-entering credentials. It acts as a bearer token, so its confidentiality and integrity protection decide whether it can be stolen or forged.

📚 Deep Dive

Learn Article

How a VPN Authentication Override Cookie Works and Why a Forged One Is a Full Login

Remember-me cookies on a VPN gateway are bearer tokens with the full power of a login. Here is what they protect, what they depend on, and how CVE-2026-0257 broke the integrity half.

intermediate 6 min read

Back to Glossary