Cookie Security Checker

See every cookie set during the page load and which security flags are missing. Cookie values are never shown.

GO DEEPERWhat do you want to uncover next?
🛡️ See the full security header grade🔒 Check HTTPS and certificate📋 Inspect every response header

Terms explained

Browser ExtensionCookieIncognito ModeSessionWeb BrowserLocal Storage

Frequently asked questions

What does HttpOnly do?

It hides the cookie from JavaScript, so a cross-site scripting bug cannot steal it. Use it for session and login cookies.

Why does it find no cookies?

Only cookies set by the server in HTTP responses are visible here. Cookies created by JavaScript (such as analytics) are not.