Why inspect Set-Cookie headers?
Browsers enforce cookie policy through attributes like SameSite, Secure, HttpOnly, and Partitioned (CHIPS). Misconfigured cookies break SSO, CSRF protections, and third-party embeds.
This inspector parses raw Set-Cookie lines locally so you can verify attributes without sending header dumps to a server.
How to use this tool
- Paste one or more Set-Cookie header values into Cookie & Header Inspector.
- Review parsed attributes such as SameSite, Secure, HttpOnly, Path, Domain, and Partitioned.
- Compare the flags against what your app or IdP expects for the current browser context.
Frequently asked questions
Are cookie values uploaded?
No. Parsing runs entirely in your browser. Session cookies and secrets never leave the tab.