Cookie Security Checker

Analyze HTTP cookies for security attributes like Secure, HttpOnly, and SameSite flags

Enter a URL to check its cookies

🔒 Cookie Security Attributes

Secure
Cookie only sent over HTTPS connections
HttpOnly
Cookie not accessible via JavaScript (prevents XSS)
SameSite
Controls cross-site request behavior:
  • Strict - Only same-site requests
  • Lax - Some cross-site (safe methods)
  • None - All cross-site (requires Secure)

No Cookies Analyzed Yet

Enter a URL or paste Set-Cookie headers to analyze security attributes