The following WordPress cookies are set by default:
Login cookies:
- wordpress_[hash] – stores admin authentication details
- wordpress_logged_in_[hash] – identifies when a user is logged in
- wp-settings-{time}-[UID] – saves user-specific admin and interface preferences
Comment cookies:
- comment_author_[hash], comment_author_email_[hash], comment_author_url_[hash] – remember commenter details to auto-fill fields next time (expire after about one year)
Test cookie:
- wordpress_test_cookie – checks if the browser supports cookies
Language cookie:
- wp_lang – stores the selected language for WordPress login pages
These cookies are primarily for functionality and security and are classified as “strictly necessary” cookies. Third-party plugins may add other cookies that could require user consent.
Read more: WordPress Cookie policy.