Cookie Security

Guides to secure cookies — the Secure, HttpOnly and SameSite flags and how to check them.

Secure Cookie Flag Explained

What the Secure cookie flag does, how it keeps cookies to HTTPS only, how it works with HSTS and the …

Jul 16, 2026

HttpOnly Cookie Flag Explained

What the HttpOnly cookie flag does, how it hides cookies from JavaScript to stop session theft via XSS, and how …

Jul 16, 2026

SameSite Cookies: Strict, Lax & None Explained

What the SameSite cookie attribute does, the difference between Strict, Lax and None, how it defends against CSRF, and how …

Jul 16, 2026

Cookie Security: Secure, HttpOnly & SameSite Flags

Cookie security explained: the Secure, HttpOnly and SameSite flags that protect session cookies from theft and CSRF, plus how to …

Jul 16, 2026

Put this knowledge to work

Secably automatically scans for the vulnerabilities covered in these guides.

Start Free Scan

Need a server to practice on?

A small VPS is enough to run and test these services safely.

Compare VPS prices →
Contabo Contabo → Cheap VPS & dedicated servers, EU/US/Asia Vultr Vultr → Cloud VPS in 30+ locations, hourly billing UltaHost UltaHost → NVMe VPS with DDoS protection Cherry Servers Cherry Servers → Bare metal & cloud servers
Sucuri Sucuri → Website firewall, malware cleanup & monitoring NordPass NordPass → Password manager with breach alerts

Affiliate links: we may earn a commission, your price stays the same.