English Русский Deutsch Español Français Bahasa Indonesia Italiano 日本語 한국어 Nederlands Português Türkçe Tiếng Việt 中文（简体）

UUID Use Case

UUID Session Token

A session token is an opaque handle. A v4 UUID identifies the session; the actual user state lives in your store, keyed by that UUID.

Opaque handleServer-side statev4

Version

How many

Uppercase Hyphens Braces { }

Result

Generated locally with the Web Crypto API — nothing leaves your browser.

What Is UUID Session Token?

The token is just an index into server-side session storage. Keeping state off the client avoids tampering and size limits.
Use a v4 UUID so tokens are unguessable; a sequential or time-based token would let an attacker enumerate sessions.

How to generate

On login, mint a v4 UUID and store the session server-side.
Set it as an HttpOnly, Secure, SameSite cookie.
Delete the server-side record on logout.

Use Cases

Web login sessions in a cookie.
Mobile app session handles.
Admin panels with short-lived sessions.

Code Examples

JavaScript

const sid = crypto.randomUUID();
sessionStore.set(sid, { userId });
res.cookie('sid', sid, { httpOnly: true, secure: true });

Frequently Asked Questions

Why not store data inside the UUID?

A UUID is random; it cannot carry state. Keep state server-side and use the UUID purely as a key.

v4 or v7 for sessions?

v4 — you do not want tokens to be time-guessable or enumerable.

Related tools

UUID v1 Generator UUID v3 Generator UUID v4 Generator UUID v5 Generator UUID v6 Generator UUID v7 Generator UUID v8 Generator Bulk UUID Generator Short UUID Generator UUID Validator UUID Formatter UUID as a Primary Key UUID Database ID UUID Foreign Key UUID Shard Key UUID Partition Key UUID in a Composite Key UUID Surrogate Key UUID API Key UUID Session Token UUID Access Token UUID Refresh Token UUID Idempotency Key UUID Request ID UUID Correlation ID UUID Trace ID UUID CSRF Token UUID Nonce UUID Filename UUID Object Key UUID S3 Key UUID Upload ID UUID Cache Key UUID Blob Name UUID Temp File UUID User ID UUID Account ID UUID Customer ID UUID Device ID UUID Tenant ID UUID Client ID UUID Anonymous ID UUID Member ID UUID Message ID UUID Event ID UUID Job ID UUID Task ID UUID Queue Message ID UUID Transaction ID UUID Order ID UUID Invoice ID UUID Payment ID UUID Reset Token UUID Verification Token UUID Invite Code UUID API Secret UUID Share Link UUID Magic Link UUID Node ID UUID Worker ID UUID Lock ID UUID Cluster ID UUID Test Data UUID Seed Data UUID Fixture UUID Mock ID UUID Placeholder ID UUID Sample ID