HTTP headers
Set-Cookie HTTP Header Meaning
Set-Cookie asks the browser to store or update a cookie.
Meaning
The server is setting a cookie name, value, and storage rules.
Where it appears
Servers send it for sessions, login state, preferences, and consent state.
What to check
Check HttpOnly, Secure, SameSite, Domain, Path, expiry, and whether multiple Set-Cookie headers are preserved.
Example
Set-Cookie: session=abc123; HttpOnly; Secure; SameSite=LaxReferences
- Registry
- IANA HTTP Field Name Registry
- Guide
- MDN Set-Cookie