Cookie Analyzer

Check cookies for Secure, HttpOnly and SameSite flags.

Each line is a Set-Cookie header

Set-Cookie headers (one per line)

What Is a Cookie Analyzer?

The Cookie Analyzer examines Set-Cookie headers and checks each cookie for the Secure, HttpOnly, and SameSite flags, and whether an expiry is set. It counts how many cookies use each security property and lists issues for cookies that are missing protection.

How to Use This Cookie Analyzer

1
Paste headersEnter one Set-Cookie header per line.
2
Enable Set-Cookie modeIf each line is a full Set-Cookie header, keep the mode on.
3
Review the analysisInspect the flag summary and any listed issues.

Frequently Asked Questions

HttpOnly prevents client-side scripts from reading the cookie, which helps stop cross-site scripting attacks from stealing session tokens.

SameSite controls when a cookie is sent with cross-site requests, offering protection against cross-site request forgery (CSRF). Strict and Lax are the safer values.

You paste the cookie headers to analyze them. The analysis runs locally in your browser and nothing is stored.

Related Security & Privacy Tools

Password Generator

Generate strong random passwords with full control.

Random Password Generator

Create secure random passwords instantly.

Password Strength Checker

Evaluate how strong a password really is.

Hash Generator

Generate MD5, SHA-1, SHA-256, SHA-512 and SHA-3 hashes.

JWT Decoder

Decode the header and payload of a JWT token.

JWT Inspector

Decode a JWT and check exp, nbf and algorithm claims.

More Security & Privacy Tools

SSL Certificate Checker

Read and analyze the TLS certificate a server presents.

SSL Expiry Checker

See how many days remain until a certificate expires.

Security Headers Checker

Verify the presence of essential security headers.

HTTP Headers Analyzer

Fetch and inspect every response header of a URL.

CSP Checker

Review a Content Security Policy for risky directives.

CORS Checker

Analyze CORS headers for misconfigurations.