Secure cookie builder

This tool composes the header string and applies the discard rules browsers enforce on the attribute combination, including the __Host- and __Secure- prefixes and CHIPS. It cannot see the origin that would send the header, its TLS state, the Public Suffix List, or your server code, so a green result here is not a deployed cookie. Nothing you type leaves this tab, and no real cookie value belongs in the name field.