Authentication Cookies / Sessions is easily one of the most misunderstood and badly documented topics in WordPress security. At the end of this, you'll exactly know how the WordPress Authentication & Session Management system works and what its weaknesses are.