CookiesCookie security in 5 minutes: Secure, HttpOnly, SameSite A session cookie is the key to a logged-in account. Three small flags decide whether that key is protected or up for grabs. Here is the five-minute version. May 11, 2026 · 2 min read