Many times I hear people say that user sessions in Flask are encrypted , so it is safe to write private information in them. Sadly, this is a misconception that can have catastrophic consequences for your applications and, most importantly, for your users.