Couple of days ago, when logging in to the Org via browser, I was prompted to update my password. Last time I used Salesforce CLI was 2 weeks ago and today I had to do it again. However, no password update was needed and I could perform all the tasks using
sfdx force:mdapi:retrieve without any authentication.
How is this possible? Is it because of some kind of token save on my computer? I tried to find some info about that but without any success.