Cookie Header Parser
Local ProcessingSplit a Set-Cookie or Cookie header into its attributes and pairs.
How It Works & Processing Standards
Split a Set-Cookie or Cookie header into its attributes and pairs.
Tool processing runs in your browser. If you create a calculator or conversion share link, its values are included in the URL. See the privacy policy for account, analytics and advertising data.
Current Limits
- Maximum input length: 100,000 characters
Choose Set-Cookie or Cookie under "Task". Check that login cookies carry HttpOnly, Secure and SameSite properly.
What You Can Do
- Set-Cookie
- Splits attributes and flags missing security attributes.
- Cookie
- Splits a request header’s cookies into names and values.
How to Use Cookie Header Parser
- 1Choose a taskSet-Cookie or Cookie.
- 2Paste the headerPaste the header value.
- 3Read the resultSee attributes and the security check.
Examples
Set-Cookie
Input: sid=abc123; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=3600
Result: name sid, value abc123, Path /, HttpOnly and Secure present, SameSite Lax, Max-Age 3600 — all key attributes are set.
Cookie
Input: a=1; b=2
Result: a: 1
b: 2
Common Use Cases
- Auditing login cookie security settings
- Inspecting cookies sent with a request
Frequently Asked Questions (FAQ)
What should SameSite be?
Lax is usually enough. Use SameSite=None; Secure only for cookies that other sites must load.