Read a Cookie or Set-Cookie header

Cookie headers are dense one-liners; a table turns attributes into something checkable.

Tools used in this guide

Cookie header parser

The job

Debugging 'why is the session dropped' means reading Expires, SameSite, Domain, and Secure at once. Pasted as raw text they're easy to misread; parsed, they're a checklist.

Paste the header

Paste 'Cookie: a=1; b=2' or a full 'Set-Cookie:' line. The table shows each name, raw and URL-decoded value, and every attribute as its own row.

Worked example

'Set-Cookie: sid=abc; Max-Age=3600; Secure; HttpOnly; SameSite=Lax' parses to sid=abc plus a four-attribute block — a session cookie that can't be read from JS.

Where it stops

Input ≤ 200 KB, structural parsing only — it reports attributes, not whether the policy is good. Secure/HttpOnly absent is shown, not judged.