Skip to main content

Cookie Parser

Paste a Set-Cookie header, a Cookie header or document.cookie and see each cookie with its attributes in plain words, with warnings.

Cookies

Stays in your browser

Shortcuts: Ctrl+Enter run · Ctrl+Shift+C copy result · / search (use ⌘ on Mac)

Next steps

Done here? Use the Send to… menu on the result to carry it on to JWT Decoder.

Free Online Cookie Parser

Read cookies without guessing. Each cookie is shown with its attributes, when it expires, and a warning when a setting is unsafe or will be rejected. It gives developers a quick browser-based way to solve a focused cookie parser task before moving the result into a project.

How to use Cookie Parser

Paste one Set-Cookie header per line, or a Cookie header or document.cookie string with several name=value pairs.

Common mistakes

  • Setting SameSite=None without Secure: browsers reject the cookie.
  • Storing large data in cookies: browsers drop cookies over about 4 KB.

Frequently asked questions

What does SameSite do?
It controls whether the cookie is sent with requests from other sites. Strict never, Lax only for normal links, None always (and then Secure is required).
What are __Host- and __Secure- prefixes?
Prefixes make browsers enforce rules: __Secure- needs Secure; __Host- also needs Path=/ and no Domain.
Why is HttpOnly important?
It hides the cookie from JavaScript, so a script injected into the page cannot steal a session cookie.
Is anything uploaded?
No. This tool runs in your browser and nothing you enter is sent to a server.
How do I use this cookie parser tool?
Use the interactive controls above; processing stays in your browser and the result is intended as a practical starting point for development work.

More DevOps & Network

View all DevOps & Network tools →