A refresh token is a special credential used in authentication systems like OAuth 2.0. While short-lived access tokens grant access to resources, the long-lived refresh token is securely stored and sent to an authorization server to obtain a new access token when the old one expires, avoiding repeated logins.