Secure Cookie Viewer

Read-only cookie viewer for the current tab. No network, no storage.

A cookie viewer built so that it cannot become the way your cookies leak. Open it on any http/https page to see the cookies stored for that page's URL: name, value, domain and path, and attributes (Secure, HttpOnly, SameSite, expiry). Partitioned cookies (CHIPS) are listed too, labeled with the top-level site they belong to. Enforced by Chrome: - No site is readable at install time. You grant the current site from the popup, and can revoke it there too - The popup cannot fetch or load anything: its Content Security Policy blocks every request - No content script, no background script Checked by tests in the repository: - The code uses a fixed allowlist of APIs, so it contains no navigation, new tabs, WebRTC, storage or network calls - The clipboard only ever receives the value you click "copy" on - Values are masked until you choose to show them, so they do not leak on a shared screen No dependencies: about 130 lines of plain JavaScript you can read yourself. Releases are reproducible from their tag and carry a build provenance attestation. Open source (MIT): https://github.com/TakashiAihara/secure-cookie-viewer