---
title: "How to Enable Secure Cookies in WordPress?"
url: https://nexterwp.com/docs/enable-secure-cookies-in-wordpress/
date: 2023-09-29
modified: 2026-06-12
author: "Aditya Sharma"
description: "Cookies store session data for logged-in users, cart information, and authentication tokens. If those cookies are not restricted to secure connections, an attacker on an unsecured network can intercept them..."
image: https://nexterwp.com/wp-content/uploads/2024/05/enable-secure-cookies-in-wordpress-1024x519.jpg
word_count: 252
---

# How to Enable Secure Cookies in WordPress?

## Key Takeaways

- Nexter Extension (Free) enables secure cookies in WordPress through the Advanced Security settings, since WordPress does not include a built-in option to enforce secure cookies.
- Secure cookies transmit authentication cookies only over secure, encrypted HTTPS connections, which prevents the browser from sending them over unencrypted HTTP connections.
- Advanced Security in Nexter > Extensions > Security requires the section toggle, the gear icon, and the Secure Cookies toggle before the Save button applies the setting.

Cookies store session data for logged-in users, cart information, and authentication tokens. If those cookies are not restricted to secure connections, an attacker on an unsecured network can intercept them and gain unauthorized access to your site.

WordPress does not include a built-in option to enforce secure cookies. With the [Nexter Extension (Free) plugin](https://wordpress.org/plugins/nexter-extension/), you can enable secure cookies on your WordPress website through the Advanced Security settings.

[LIVE EXTENSION LINK](https://nexterwp.com/nexter-extensions/advanced-wordpress-security/)

 

## What is Secure Cookies?

In WordPress, secure cookies are a security feature that ensures cookies are only transmitted over secure, encrypted HTTPS connections. When this option is enabled, the browser will not send authentication cookies over an unencrypted HTTP connection, which prevents session hijacking on mixed-content or unsecured networks.

## How to Enable Secure Cookies with the Nexter Extension?

To enable secure cookies with the Nexter Extension, go to **Nexter** > **Extensions** > **Security** from the WordPress Dashboard.

Go to the **Advanced Security** section, enable the section toggle, and click the gear icon (⚙) to open the settings.

![](https://nexterwp.com/wp-content/uploads/2025/08/advanced-security-settings-new-1.png)

The Advanced Security popup opens. Enable the **Secure Cookies** toggle and click the **Save** button.

![secure cookies](https://nexterwp.com/wp-content/uploads/2023/09/secure-cookies-new.png)

Your website cookies will now only be transmitted over secure, encrypted HTTPS connections, and each cookie will be scoped to your website only.

For additional security hardening with Nexter Extension, see [How to Harden iFrame Security in WordPress](https://nexterwp.com/docs/harden-iframe-security-in-wordpress/) to restrict what content third-party iFrames can access on your site. To manage WordPress server load and reduce unnecessary background requests, see [How to Manage Heartbeat Control API in WordPress](https://nexterwp.com/docs/manage-heartbeat-control-api-in-wordpress/).