Your files stay on your device

Secure cookie builder

Assemble a Set-Cookie header from a scenario and see which attribute combos, including _Host- and _Secure- prefixes, a browser would discard.

This tool composes the header string and applies the discard rules browsers enforce on the attribute combination, including the _Host- and _Secure- prefixes and CHIPS. It cannot see the origin that would send the header, its TLS state, the Public Suffix List, or your server code, so a green result here is not a deployed cookie. Nothing you type leaves this tab, and no real cookie value belongs in the name field.
Options

More web & auth tools

- Cookie analyzer (/web/cookie)
- HTTP header parser (/web/headers)
All web & auth tools (/web)

Was this tool useful?
YesNo

Canonical HTML: https://nutter.tools/web/secure-cookie-builder
Markdown version: https://nutter.tools/web/secure-cookie-builder.md
Plain-text version: https://nutter.tools/web/secure-cookie-builder.txt
Agent index: https://nutter.tools/llms.txt