Your files stay on your device

# Secure cookie builder

Assemble a Set-Cookie header from a scenario and see which attribute combos, including __Host- and __Secure- prefixes, a browser would discard.

This tool composes the header string and applies the discard rules browsers enforce on the attribute combination, including the __Host- and __Secure- prefixes and CHIPS. It cannot see the origin that would send the header, its TLS state, the Public Suffix List, or your server code, so a green result here is not a deployed cookie. Nothing you type leaves this tab, and no real cookie value belongs in the name field.
Options

## More web & auth tools

- [Cookie analyzer](/web/cookie)
- [HTTP header parser](/web/headers)
[All web & auth tools](/web)

Was this tool useful?
YesNo

---

Canonical HTML: https://nutter.tools/web/secure-cookie-builder
Markdown version: https://nutter.tools/web/secure-cookie-builder.md
Plain-text version: https://nutter.tools/web/secure-cookie-builder.txt
Agent index: https://nutter.tools/llms.txt