Cookie / Set-Cookie Parser
Paste a Cookie or Set-Cookie header, edit RFC 6265 attributes, see SameSite and prefix flags, and copy a rebuilt header. Parsed in your browser — never sent, never written to the cookie store.
Developer notes
• Parser follows RFC 6265bis plus CHIPS Partitioned. Max-Age wins over Expires when both are present. • Cookie: is name=value pairs. Set-Cookie: carries Domain, Path, Max-Age, Expires, Secure, HttpOnly, SameSite, Partitioned. • Flags (always on, not options): SameSite=None without Secure; __Host- without Secure + Path=/ + no Domain; __Secure- without Secure; name+value size > 4096. • Copy Cookie drops attributes. Copy Set-Cookie keeps them. Rebuild matches the detected kind for the live preview. • Values that look like JWTs are not auto-decoded — use JWT Decode. FastMinify never reads document.cookie or chrome.cookies.
When this is the right tool
• Check why SameSite=None was rejected (missing Secure). • Verify a __Host- cookie has Path=/ and no Domain. • Turn a Set-Cookie block into a Cookie request header for a ticket.
Worked examples
SameSite=None without Secure
Before
After
Copy Cookie drops attributes
Before
After
Related HTTP and token tools
Hub: HTTP Tools. Format a request with cURL Formatter. Inspect a raw message with HTTP Message Parser. Decompose a URL with URL Parser. Inspect a session HAR with HAR Inspector. A cookie value that looks like a JWT: JWT Decode — this page does not auto-decode values.
Cookie / Set-Cookie Parser FAQ
Header grammar — not a cookie-store editor
Is this a cookie editor Chrome extension?
No. The slug is cookie-header-editor, but the job is a local Cookie / Set-Cookie parser. There is no install-extension CTA and no write to the browser cookie store.
Can I load cookies from this browser?
No. Paste a header. FastMinify never reads document.cookie or chrome.cookies.
Does SameSite=None without Secure fail the parse?
No. The row is kept and a flag is shown. Rebuild includes your edits.
Are JWT cookie values decoded here?
No. Use JWT Decode if a value looks like a token.
What does Copy Cookie drop?
Attributes (Domain, Path, Max-Age, Expires, Secure, HttpOnly, SameSite, Partitioned). You get Cookie: name=value pairs only.
HTTP Tools
Paste-local cURL, HTTP messages, URLs, HAR files, and Cookie / Set-Cookie headers — format and inspect in your browser, never sent.
Explore other tool categories
Minify
Shrink code and assets for production — minify JavaScript, CSS, HTML, JSON and XML before gzip or CDN deploy.
Unminify
Expand minified or compressed code — unminify JavaScript, CSS, TypeScript, SCSS, LESS, SQL, YAML and other formats when debugging or reviewing.
Conversion
Transform data between JSON, YAML, XML and CSV locally — no server uploads.
Encoding
Encode or decode Base64, URL components and HTML entities — client-side only.
Serialization
Serialize and deserialize PHP data structures beside JSON workflows.
JSON Tools
Validate, format, diff and explore JSON payloads — complementary to minifiers and converters.
SVG Tools
Preview, optimize with SVGO, export Data URI, resize, beautify, convert to JSX and validate SVG — all in your browser.
Beautify
Make code readable with consistent indentation — beautify JavaScript, CSS, TypeScript, SCSS, LESS, Markdown, GraphQL, SQL, YAML and more in your browser.
CSS preprocessors
Compile SCSS or LESS to standard CSS in the browser — pair with beautify or minify for a full stylesheet workflow.
Color & CSS Tools
Paste-local WCAG contrast checking with modern CSS color syntax — pair and matrix views, never uploaded.
DevOps & Infra
Terraform HCL format/validate/minify, Dockerfile format & lint, Docker Compose and .env validation.
CI/CD
GitHub Actions and GitLab CI — format YAML and check workflow/job structure in your browser.
Logs & observability
Line-oriented JSON/NDJSON and Nginx/Apache access logs — format, filter, validate, and CSV/TSV.
Kubernetes
Multi-doc manifests, structural validate, Ingress/Deployment starters, and Helm values formatting.
Networking / IP
CIDR, subnets, and IPv4/IPv6 helpers — in your browser.
Security & tokens
JWKS, X.509 certificates, and secrets scan — browser-local.
API & schemas
OpenAPI tools to format, validate, and lint your specs.
SEO / Web Tools
Generate meta tags, Open Graph, and Twitter Card output locally — previews simulated from your inputs, never fetched from your live site.
Developer utilities
Timestamps, UUID, ULID, Nanoid, cron, passwords, regex, slugify, number bases, case, text diff, and chmod — all client-side.
Text & Markdown
Count words, build Markdown TOCs, and clean line lists — all in your browser.
AI & LLM
Token counting, pricing estimates, and context-window fit — 100% browser-local.
Test Data
Synthetic field values for fixtures and DB seed — reserved-range phone numbers first.