Cookie analyzer

Secure — cookies are sent over HTTPS only. HttpOnly — cookies are inaccessible to JavaScript, protecting against XSS. Both attributes are recommended for session cookies.

SameSite limits when cookies are sent with cross-site requests. Strict — same-site requests only. Lax — during navigation. Protects against CSRF. Lax or Strict is recommended.

GDPR requires consent for non-essential cookies. Analytics and advertising cookies require consent; strictly necessary cookies don't. Cookie Analyzer identifies cookie types and provides recommendations.

The website uses HTTP or the attribute is not set. Enable HTTPS and add Secure when setting cookies. Browsers are increasingly requiring Secure for SameSite.

Set Secure, HttpOnly, SameSite=Lax (or Strict) when creating cookies. Check with Cookie Analyzer after making changes.