When your web application needs to “remember” users, it typically uses either of two mechanisms: cookies or sessions. A cookie is a small area of storage in the browser where you can keep user-related data like search preferences, for example. Sessions allow you to store sensitive information on the server instead.