InspectWP Logo

Cookie Checker for Your Website

Please provide a valid URL (https://www.example.com).
HTTP Basic Auth For password-protected websites (.htaccess)
Premium Plan Feature
Upgrade

Which cookies does your website set before anyone has consented?

Cookie scan, 100% online and free
Thousands of website owners rely on InspectWP for their cookie check

What does the Cookie Checker check?

All cookies set on the first page view, without consent

Name, value and lifetime: session or persistent

Secure, HttpOnly and SameSite flags of every cookie

Entries in Local Storage and Session Storage

Cookie banner and consent tool in use

Google Consent Mode and the TCF interface

How the cookie check works

From URL to a complete cookie list in 4 steps

  1. 1 Step 1

    Enter URL

    Enter the address of the page you want to check. No installation and no registration needed.

  2. 2 Step 2

    Load the page like a visitor

    We open the page in a real browser and run all scripts. The cookie banner stays untouched.

  3. 3 Step 3

    Read cookies and storage

    We read all cookies, Local Storage and Session Storage and check the security flags of every cookie.

  4. 4 Step 4

    Block what needs consent

    Use the list to find the scripts that set cookies too early and place them behind your consent tool.

What the cookie scan records

Four places where a website leaves traces in the browser

Cookies
All cookies that exist in the browser after the page has loaded, from your own domain and from third parties. Each one is listed with name, value and the information whether it expires at the end of the session.
Local Storage
Key and value of every entry in localStorage. Data stored here does not expire on its own and is legally treated like a cookie if it serves tracking purposes.
Session Storage
Key and value of every entry in sessionStorage. This data is deleted when the tab is closed, but it is still access to the visitor's device.
Cookie banner and consent tool
We detect whether a banner is present and name the tool behind it, for example Borlabs Cookie, Real Cookie Banner, Complianz, Cookiebot, Usercentrics or OneTrust.

The cookie attributes in the report

Four properties that determine how secure and how long-lived a cookie is

Secure
Transport
The cookie is only transmitted over encrypted HTTPS connections. On an HTTPS website, every cookie without this flag is reported.
HttpOnly
Script access
The cookie cannot be read by JavaScript. Essential for session and login cookies. Cookies that scripts need to read, such as those of analytics tools, cannot carry this flag.
SameSite
Cross-site requests
Controls whether the cookie is sent with requests from other websites. Cookies without this attribute or with the value None are reported.
Session
Lifetime
Shows whether the cookie is deleted when the browser is closed or stays stored beyond that. Long-lived cookies are typical for tracking and for the stored consent decision.

What the Cookie Checker cannot do

The scan shows the technical state of one URL before consent. It does not click through your banner and therefore does not check which cookies are added after acceptance or whether a rejection is respected. It is a technical check and does not replace legal advice on your cookie banner or your privacy policy.

Cookie Checker: scan a website for cookies

See which cookies your website sets without consent

The decisive question for every cookie banner is not how it looks but what happens before anyone clicks it. The InspectWP Cookie Checker opens your page in a real browser, just like a first-time visitor, and does not click anything. No "Accept", no "Decline". Every cookie we find afterwards was therefore set without consent. The report lists each one with name, value and lifetime, so you can see at a glance whether a tracking or marketing cookie slips through before your banner has done its job.

More than a cookie list: flags, storage and consent setup

Cookies are only one of several places where a website stores data in the browser. That is why the report also shows all entries in localStorage and sessionStorage, which many tracking scripts use instead of cookies. For every cookie we check the security flags Secure, HttpOnly and SameSite and list the cookies where one of them is missing. On top of that we detect whether a cookie banner is present and which consent tool provides it, and whether Google Consent Mode and the TCF interface are active.

Cookie scan: cookie flags, Local Storage and consent banner

Thousands of website owners trust InspectWP

The numbers speak for themselves

0+
Websites analyzed
0+
Plugins detected
0+
Themes detected

Frequently asked questions about the Cookie Checker

What the cookie scan shows, where its limits are and what to do with the result

More tools you might need

These checks cover related topics

Your registration could not be saved. Please try again.
Your registration was successful.

Newsletter

Subscribe to our newsletter to stay up to date.

We use Sendinblue as our marketing platform. By completing and submitting the form, you acknowledge that the information you have provided will be sent to Sendinblue for processing in accordance with Terms of Use.