Cookie

Sends previously stored cookies from the server back with each request.

Syntax

Cookie: <name>=<value>; <name>=<value>

Example

Cookie: session_id=abc123; user_pref=dark_theme

Description

The Cookie header transmits stored HTTP cookies to the server. Browsers automatically include cookies that match the request's domain, path, and security requirements.

Cookies are set by the server via Set-Cookie and are commonly used for session management, personalisation, and tracking. For security, cookies should use the HttpOnly, Secure, and SameSite attributes.

Check if your website sends this header correctly

Check your headers →

HSTS and Preload List: Complete Implementation Guide

Complete guide to HTTP Strict Transport Security (HSTS) header and preload list. Implementation steps, risks, rollback strategy, and best practices.

The Complete HTTP Request Lifecycle: From URL to Rendered Page

Trace every step of an HTTP request from typing a URL to seeing a rendered page. DNS, TCP, TLS, HTTP, rendering — understand the full journey.

WAF Rules: Writing Effective Web Application Firewall Policies

Learn how to write effective WAF rules, understand rule types, avoid false positives, and protect your web application from common attacks.