A refresh token is a credential used to obtain a new access token without requiring the user to re-authenticate, enhancing security and user experience in token-based authentication systems. It is typically long-lived and securely stored, allowing applications to maintain user sessions seamlessly while minimizing the risk of unauthorized access.