Response
Set-Cookie
Sends a cookie from the server to the browser for session management, tracking, and personalization.
Syntax
Set-Cookie: <name>=<value>; Path=/; Secure; HttpOnly; SameSite=LaxExample
Set-Cookie: session_id=abc123; Path=/; Secure; HttpOnly; SameSite=Lax; Max-Age=86400Description
Set-Cookie sends cookies to the browser. Enables session management, preferences, and tracking.
Key attributes: Secure (HTTPS only), HttpOnly (no JS access), SameSite (Strict/Lax/None), Path, Domain, Max-Age.
For security: always use Secure; HttpOnly; SameSite=Lax for session cookies. Never store sensitive data directly.
How real sites send this header
Home-page responses of 503 popular sites from the enterno.io /check catalogue, checked in the last 30 days.
48.3%
(243 of 503) send Set-Cookie.
See it on: google.com, yandex.ru, discord.com, github.com, habr.com
Check if your website sends this header correctly
Check your headers →