Session hijacking in one sentence: your login cookie is basically a spare key, and if someone steals it, they don't need your password at all , they just walk in as you. That's why "logout everywhere" after a public wifi session isn't paranoia, it's basic hygiene. 🔑🔓.