What Are Cookies?
Browser cookies are small pieces of data that websites ask your browser to store. They can help a site remember your login session, shopping cart, language, and other preferences. A cookie may contain an identifier, expiration information, and other site-related values; it does not normally contain your actual account password. Cookies can also support analytics and advertising across websites. Learn how cookies fit into online tracking and what you can do to manage them.
Different Types of Cookies
Cookie categories describe different things: how long a cookie lasts, who sets it, and which security protections it uses. Session and persistent cookies describe lifetime; first-party and third-party describe context; HttpOnly, Secure, and SameSite are cookie attributes.
Browser Cookie Types at a Glance
Different cookie labels describe their lifetime, origin, or protective settings. A single cookie can be both persistent and first-party, while also using security attributes such as HttpOnly and Secure.
| Type | What it does | What to know |
|---|---|---|
| Session | Keeps temporary session state | Usually removed after the session ends |
| Persistent | Remembers information across visits | Lasts until expiration or deletion |
| First-party | Stores information for the site you visit | Often used for logins and preferences |
| Third-party | Supports embedded services and potentially tracking | Increasingly restricted by browser protections |
| HttpOnly | Limits JavaScript access to a cookie | Helps protect values from direct script access |
| Secure | Restricts cookie sending to secure connections | Generally requires HTTPS |
| SameSite | Controls cross-site request behavior | Helps reduce some CSRF risks |
Cookies vs. Browser Cache: What Is the Difference?
Cookies generally store small pieces of site-related data, such as a session ID or language preference. The browser cache stores reusable website resources such as images, stylesheets, and scripts. Clearing cookies may sign you out; clearing cached files usually forces updated resources to be downloaded. For more website troubleshooting guidance, visit our support resources.
| Feature | Cookies | Cache |
|---|---|---|
| Primary use | Sessions and preferences | Reusable website files |
| Typical contents | Identifiers and settings | Images, CSS and scripts |
| Clearing affects logins | Often | Usually not directly |
| Clearing fixes issues | Sometimes, especially login problems | Sometimes, especially stale content |
Session Cookies
Session cookies are usually removed at the end of a browser session, although session restoration may preserve them in some browsers. They can hold session identifiers and other data needed for a website to function. For more about cookies and other tracking methods, see our online tracking guide.
Permanent Cookies
Persistent cookies have an expiration date or maximum age and can remember login state, shopping carts, and preferences across visits. They can be helpful, but a stolen session cookie may permit unauthorized account access. Restrict unnecessary tracking cookies rather than automatically blocking every persistent cookie. Review more online privacy tips.
Third Party Cookies
Third-party cookies are associated with a domain other than the site shown in the address bar. They may support embedded services, advertising, or cross-site tracking. Browsers restrict third-party cookies in different ways; availability and exceptions can change. Read our guide to cookies and tracking.
HTTP Only Cookie
An HttpOnly cookie cannot be read directly using JavaScript APIs such as document.cookie. This reduces the risk of a script stealing the cookie value, but it does not prevent cross-site scripting attacks or guarantee protection from all session abuse. The setting is controlled with the HttpOnly cookie attribute.
Same Site Cookie
The SameSite attribute controls when browsers send cookies in cross-site request contexts. The values Strict, Lax, and None provide different behavior. SameSite=None requires Secure in modern browsers. Same-site and same-origin are not identical, and SameSite is a defense against certain cross-site request forgery (CSRF) attacks, not a complete replacement for other protections.
Super Cookies
“Supercookie” is an informal term sometimes used for persistent tracking techniques outside ordinary HTTP cookies, including identifiers stored in other browser or network mechanisms. These methods do not all work alike, and their removal depends on how they are implemented. Deleting regular cookies alone may not erase every tracking identifier; review your browser’s site-data and privacy settings.
Secure Cookie
The Secure attribute tells the browser to send a cookie only over HTTPS connections (with limited browser-specific exceptions, such as localhost). It reduces exposure over unencrypted transport, but does not itself encrypt the cookie’s contents or prevent other attacks.
Are Cookies Harmful?
Cookies are data, not executable programs or computer viruses. Many are necessary for logins and preferences, while some support tracking across websites. Session identifiers can create security risks if stolen. Instead of blocking every cookie, review browser tracking protection, delete unwanted site data, and follow safe browsing practices to limit unnecessary exposure.
Deleting Cookies on your PC
Microsoft Edge
Open Microsoft Edge. Select the three-dot menu, then Settings > Privacy, search, and services. Find Clear browsing data, choose what to clear, select Cookies and other site data, choose a time range, and confirm. The location of individual site-data controls may vary with the Edge version.
Chrome
Open Google Chrome, open the three-dot menu, and select Delete browsing data (or open Settings > Privacy and security > Delete browsing data). Choose the time range, select Cookies and other site data, and click Delete data. Third-party cookie controls are in Settings > Privacy and security; wording may vary by browser version.
Firefox
Open Firefox. Open the menu and choose Settings > Privacy & Security. In Cookies and Site Data, select Clear Data or Clear Browsing Data depending on your version, and choose the website data to remove. To delete cookies for one site, use Manage Data when available. Firefox also offers Standard, Strict, and Custom tracking protection.
Opera
Open Opera, then open Settings > Privacy & security > Delete browsing data. Select the time range and Cookies and other site data, then confirm. Cookie and tracker controls are also available in browser privacy settings; exact labels depend on the Opera version.
Safari (MacOS only)
In Safari on a Mac, choose Safari > Settings > Privacy > Manage Website Data. Select a website and click Remove, or choose Remove All to clear all listed website data. Safari also provides cross-site tracking protections in Privacy settings.
Deleting Cookies On Your Mobile Device
Google Chrome on iOS/Android
In the Chrome app on iPhone or Android, open the menu and choose Delete browsing data (or find it under Settings > Privacy and security). Select the time range and cookies/site data, then confirm. Menu labels differ across iOS, Android, and app versions. Check the selected categories so you do not remove other data unintentionally.
iPhone for Mozilla Firefox
In Firefox on iPhone, open the menu, select Settings, and find Data Management or Delete Browsing Data. Choose cookies and other data you intend to remove, then confirm. Firefox tracking protection settings can also help restrict tracking without clearing every site login.
Android for Mozilla Firefox
In Firefox for Android, open the menu and go to Settings > Delete browsing data. Select Cookies and site data (and any other categories you want to clear), then tap the delete option. Firefox versions may label these controls differently.
Safari on iOS
On recent iPhone versions, open Settings > Apps > Safari. Choose Clear History and Website Data to clear history and related website data, or use Advanced > Website Data to remove stored website data without clearing all browsing history. On older iOS versions, Safari settings may appear directly under Settings. Review the choices before confirming.
How to Delete Cookies for Just One Website
If only one website is having trouble, remove its cookies or site data instead of signing out of every website. In Chrome, look under Settings > Privacy and security > Site settings and the site-data controls. In Firefox, open Settings > Privacy & Security > Cookies and Site Data > Manage Data when available. Safari on Mac offers Safari > Settings > Privacy > Manage Website Data. Browser names and menus can change, so use their built-in Settings search if needed. For other site issues, see RSH Web Support.
What Happens When You Delete Cookies?
Removing cookies commonly signs you out of websites, resets preferences, and may remove shopping-cart state stored in cookies. It does not normally erase bookmarks, downloads, or passwords saved separately in a password manager when you choose only cookies. Websites may create new cookies the next time you visit. Clearing cookies can limit certain tracking identifiers, but it will not make you anonymous or remove every form of online tracking.
Cookie Privacy and Security Best Practices
- Use browser tracking protection to limit unwanted third-party tracking.
- Delete site-specific cookies first when troubleshooting one website.
- Keep necessary first-party cookies enabled if blocking them breaks sign-in or shopping carts.
- Sign out of sensitive websites when using a shared computer.
- Keep your browser updated and review site permissions occasionally.
- Review optional cookie consent settings rather than automatically accepting every category.
- Use private browsing to reduce data kept after a private session, not as a guarantee of anonymity. See our online privacy guide and safe browsing tips.
Common Cookie Problems and Solutions
| Problem | What to try |
|---|---|
| Website keeps signing you out | Check whether cookies are blocked or automatically cleared. |
| Saved preferences disappear | Allow necessary cookies for the affected website. |
| Login loops or fails | Delete cookies for that website and sign in again. |
| Website shows old content | Clear cached resources, then reload. |
| Cookies reappear | Revisiting a website can set fresh cookies. |
| Embedded sign-in fails | Review browser tracking protection or third-party cookie exceptions carefully. |
Frequently Asked Questions About Browser Cookies
Author Bio: Joel Heese
Joel is a expert in the fields of digital, technology, and business. With a wealth of experience and knowledge, he has successfully navigated...
Add Comment
This policy contains information about your privacy. By posting, you are declaring that you understand this policy:
- Your name, rating, website address, town, country, state and comment will be publicly displayed if entered.
- Aside from the data entered into these form fields, other stored data about your comment will include:
- Your IP address (not displayed)
- The time/date of your submission (displayed)
- Your email address will not be shared. It is collected for only two reasons:
- Administrative purposes, should a need to contact you arise.
- To inform you of new comments, should you subscribe to receive notifications.
- A cookie may be set on your computer. This is used to remember your inputs. It will expire by itself.
This policy is subject to change at any time and without notice.
These terms and conditions contain rules about posting comments. By submitting a comment, you agree with these rules:
- Although the administrator will attempt to moderate comments, not all comments can be moderated at all times.
- You acknowledge that all comments express the opinions of the original author and not those of the administrator.
- You will not post material which is knowingly false, obscene, hateful, threatening, harassing or invasive of privacy.
- The administrator has the right to edit, move or remove any comment for any reason and without notice.
Failure to comply with these rules may result in being banned from submitting further comments.
These terms and conditions are subject to change at any time and without notice.
Tweet Share Pin Email
Privacy Tips, Hide - Remove Yourself from Search Directories
Secure Mobile Transactions, Security For Mobile Devices
How To Block Spam, Robotexts and Unwanted Text Messages
Ultimate Guide to Creating Strong Passwords With Expert Tips
Comments