A nonce is a pseudo random number that may be used only once. If a nonce is sent across in every request from the client to the server and the server validates the sent nonce every single time, then it mitigates the risk of Cross Site Request Forgery (CSRF).

Why is nonce important?

The nonce is used to give ‘originality’ to a given message so that if the company receives any other orders from the same person with the same nonce, it will discard those as invalid orders. A nonce may be used to ensure security for a stream cipher.

What should the nonce be?

Ideally, a nonce will have both random and sequential parts. For example, a timestamp of 3:01 p.m. 9/17/2020 would be a sequential nonce, because it is produced incrementally. … However, it would be less likely to be unique because there is a chance that the same random number could be generated more than once.