What is HttpCookie Class in C#?

Question

ICSM Computer · Answer

The HttpCookie class in ASP.NET (System.Web) is used to create, read, and manage cookies — small pieces of data stored on the client’s browser.and 
Cookies are commonly used for storing user preferences, authentication tokens, session identifiers, or any small data that needs to persist between requests.
Namespace and Assembly
using System.Web;
Difinition
public sealed class HttpCookie
This class represents an individual cookie — a name-value pair optionally with metadata like expiration date, path, domain, and security settings.
Constructors
HttpCookie(String, String)
Creates, names, and assigns a value to a new cookie.
HttpCookie(String)
Creates and names a new cookie.
Common Properties
Property
Description
Name
The name of the cookie (required)
Value
The string value stored in the cookie
Expires
Sets the expiration date (otherwise it's a session cookie)
Domain
Specifies the domain the cookie is valid for
Path
Specifies the path the cookie is valid for
Secure
If true, the cookie is sent only over HTTPS
HttpOnly
If true, JavaScript cannot access the cookie
Values
A collection of key-value pairs inside the cookie
Creating and Sending a Cookie to the Browser
HttpCookie userCookie = new HttpCookie("UserSettings");
userCookie["Theme"] = "Dark";
userCookie["FontSize"] = "Medium";
userCookie.Expires = DateTime.Now.AddDays(7); // lasts 7 days
userCookie.HttpOnly = true;
Response.Cookies.Add(userCookie);
Reading a Cookie
HttpCookie cookie = Request.Cookies["UserSettings"];
if (cookie != null)
{
    string theme = cookie["Theme"];
    string fontSize = cookie["FontSize"];
}
This reads the cookie from the user's browser on the next request.
Deleting a Cookie
You "delete" a cookie by setting its expiration date in the past:
if (Request.Cookies["UserSettings"] != null)
{
    HttpCookie cookie = new HttpCookie("UserSettings");
    cookie.Expires = DateTime.Now.AddDays(-1); // expired
    Response.Cookies.Add(cookie);
}
Security Notes
Set HttpOnly = true to prevent client-side JavaScript from accessing cookies.Use Secure = true for HTTPS-only cookies.Cookies can be intercepted if not encrypted — don’t store sensitive data unless encrypted.
Session vs Persistent Cookie
Type
Behavior
Session cookie
No Expires set — deleted when the browser closes
Persistent cookie
Expires set — stored until expiration
Example Scenario: Remember User's Language Preference
// On first login
HttpCookie langCookie = new HttpCookie("PreferredLang", "en-US");
langCookie.Expires = DateTime.Now.AddMonths(1);
Response.Cookies.Add(langCookie);
// Later usage var lang = Request.Cookies["PreferredLang"]?.Value;
and

Property	Description
`Name`	The name of the cookie (required)
`Value`	The string value stored in the cookie
`Expires`	Sets the expiration date (otherwise it's a session cookie)
`Domain`	Specifies the domain the cookie is valid for
`Path`	Specifies the path the cookie is valid for
`Secure`	If `true`, the cookie is sent only over HTTPS
`HttpOnly`	If `true`, JavaScript cannot access the cookie
`Values`	A collection of key-value pairs inside the cookie

Type	Behavior
Session cookie	No `Expires` set — deleted when the browser closes
Persistent cookie	`Expires` set — stored until expiration

interview

What is HttpCookie Class in C#?

ICSM Computer

Can you answer this question?

1 Answers

Namespace and Assembly

Difinition

Constructors

Common Properties

Creating and Sending a Cookie to the Browser

Reading a Cookie

Deleting a Cookie

Security Notes

Session vs Persistent Cookie

Example Scenario: Remember User's Language Preference

Liked By

HttpCookie(String, String)	Creates, names, and assigns a value to a new cookie.
HttpCookie(String)	Creates and names a new cookie.