Cookie Analyzer
Paste a Set-Cookie value, one or more Set-Cookie header lines, or full HTTP response headers to review cookie attributes, lifetime hints, prefix requirements, and clear configuration concerns. Analysis runs entirely in your browser and does not contact the referenced site.
Analyze a pasted Set-Cookie value or full response headers to review cookie pairs, recognized attributes, lifetime, and common configuration issues locally.
How to analyze Set-Cookie
- Paste one Set-Cookie value, a header line, or a full response header block.
- Review each cookie, its attributes, lifetime classification, errors, and review notices.
- Pay attention to Secure, HttpOnly, SameSite, Partitioned, and cookie-prefix conditions.
What the analyzer checks
It recognizes Secure, HttpOnly, SameSite, Domain, Path, Max-Age, Expires, Partitioned, and Priority. Missing Secure, HttpOnly, or SameSite is marked for review.
SameSite=None or Partitioned without Secure is an error. __Secure- requires Secure, while __Host- requires Secure, no Domain, and Path=/.
Privacy and limitations
Cookie text is parsed only in your browser. The tool does not store cookies, test domain or path matching, evaluate real same-site request context, or guarantee browser acceptance.
Cookie Analyzer FAQ
Can I paste several Set-Cookie lines?
Yes. Full response headers can contain repeated Set-Cookie fields.
Does it check Secure and HttpOnly?
Yes. Missing attributes are reviewed.
Does it check SameSite=None?
Yes. Without Secure it is reported as an error.
Does it test real cookie storage?
No. It only analyzes pasted text.
Is cookie data uploaded?
No. Analysis stays in the browser.