Skip to content
mistakes.show
793Kissues on 68,769 sites
  1. Home
  2. Mistakes
  3. Cookies without the Secure flag
SecurityImportant

Cookies without the Secure flag

Cookies set on HTTPS without Secure can leak over plain HTTP.

26%of Global websites

By market

  1. Global26%
  2. United Kingdom27%
  3. Netherlands21%
  4. Italy32%
  5. Spain31%
  6. Japan23%
  7. Latin America25%

How to fix

  1. 1Add Secure (and HttpOnly where possible) to every cookie.
  2. 2Set SameSite=Lax or Strict unless cross-site use is needed.

Our crawler: 68,769 sites · Global · updated Oct 23, 2026 · Methodology

Found mistakes on your site?

We can fix them in one sprint. Reply within one business day.