DevCoreTools

HTTP Cookie Parser / Builder

Parse Cookie and Set-Cookie headers, inspect attributes, and build secure cookie header values locally.

Cookie input

Parse request Cookie headers, response Set-Cookie headers, or build one Set-Cookie value.

Processed locally in your browser Limit Cookie text. Your input is processed in your browser and is not uploaded or sent to a server. Avoid pasting production secrets, access tokens, private keys, passwords, or sensitive customer data unless you understand the risk.
Parse Cookie0 input characters0 cookies0 warnings

Session and auth-like values are redacted in reports by default. The tool never reads browser cookies or writes cookies.

Cookie output

Structured rows, secure attribute warnings, redacted reports, and copy-ready headers.

Waiting for inputParse Cookie0 attributes
Cookie details appear here.

Paste a Cookie or Set-Cookie header, load a sample, or switch to builder mode to generate a response cookie.

HTTP cookie parsing guide

Review request cookies and response cookie attributes as text, without touching the browser cookie jar.

Cookie vs Set-Cookie

Cookie is sent by a client as name/value pairs. Set-Cookie is sent by a server and includes one cookie plus attributes such as Path, Domain, and Secure.

Secure and HttpOnly

Secure limits sending to HTTPS. HttpOnly keeps browser JavaScript from reading sensitive session values.

SameSite behavior

SameSite=Lax is a common default, Strict is tighter, and None is for cross-site use but must be paired with Secure.

Expiration

Max-Age is a relative lifetime in seconds. Expires is an absolute HTTP date. Invalid or past values are flagged for review.

Scope warnings

Broad Domain values and Path=/ can send cookies more widely than expected. The table keeps those attributes visible while reports redact likely secrets.

Text-only safety

This page does not call APIs, set cookies, read existing cookies, or access document.cookie. It only parses and builds pasted text.

Keep working

View all API & Auth tools
HTTP Headers Parser / FormatterParse, format, inspect, and export HTTP headers locally with structured warnings.CORS Header Explainer / GeneratorSecurity & CryptoGenerate and explain CORS response headers locally with validation warnings.CSP Header GeneratorSecurity & CryptoGenerate Content Security Policy headers with directives, warnings, and copy-ready output.URL Parser / Query String ParserEncoding & DecodingParse full URLs, relative URLs, and query strings into structured parts.JWT DecoderDecode JWT headers, payloads, claims, and timestamps locally.Base64 Encoder/DecoderEncoding & DecodingEncode and decode Base64 and Base64URL text in your browser.
Learn more: JWT Guide