getting started
Quick tour
A two-minute walk through the SessionCourier popup — cookie list, search, editor, and exports.
The cookie list
When you open SessionCourier, the popup shows the cookies for the site in your active tab — the common case when you’re debugging the page in front of you. You can also switch to a view of all cookies across every domain the browser has stored, for when you need to hunt something down.
It works against the cookie store of a real, long-lived browser profile, not just a clean test one — the search box below narrows a long list to the cookie you’re after.
Search and filter
A single search box narrows the list as you type. Matching runs across the cookie name, its domain, and its value, so you can find a cookie whether you remember what it’s called, where it lives, or a fragment of what it contains. Details of every attribute you can then change are in create, edit and delete cookies.
The cookie editor
Select any cookie to inspect and change every attribute it has: value, domain, path, expiry, and the Secure, HttpOnly and SameSite flags. Changes apply to the live browser cookie immediately — there is no separate save-and-sync step. The full workflow, including creating a cookie from scratch and deleting one, is covered in create, edit and delete cookies.
Exports
One export menu offers four formats, each aimed at a different tool:
- JSON — full-fidelity round-trip between browsers (see import and export cookies).
- Netscape
cookies.txt— the formatcurl,wgetandyt-dlpread. - curl command — a ready-to-run
curl … -H 'Cookie: …'line that replays the session against the site. - Playwright
storageState— astorageState.jsonyour Playwright and Puppeteer tests can reuse.
The Playwright path is the one most people come for — see the storageState export guide. The exact shape of every format is documented in the export formats reference.
JWT badges
Any cookie whose value looks like a JSON Web Token is flagged with a JWT badge in the list. Open that cookie and SessionCourier decodes the token’s header and payload inline in the editor — nothing leaves your browser. See decode JWTs inline.
On the roadmap
A few things aren’t in the extension yet: named per-domain profiles, encrypted sync, a CI-side CLI/API, and cookie protection. These are the planned paid tier — nothing in today’s free extension is gated behind it. Join the waitlist to hear when they ship.