What cookies does WordPress set by default

The following WordPress cookies are set by default:

Login cookies:

• wordpress_[hash] – stores admin authentication details
• wordpress_logged_in_[hash] – identifies when a user is logged in
• wp-settings-{time}-[UID] – saves user-specific admin and interface preferences

Comment cookies:

• comment_author_[hash], comment_author_email_[hash], comment_author_url_[hash] – remember commenter details to auto-fill fields next time (expire after about one year)

Test cookie:

• wordpress_test_cookie – checks if the browser supports cookies

Language cookie:

• wp_lang – stores the selected language for WordPress login pages

These cookies are primarily for functionality and security and are classified as “strictly necessary” cookies. Third-party plugins may add other cookies that could require user consent.

Read more: WordPress Cookie policy.