Cooquies

WordPress uses cooquies, or tiny pieces of information stored on your computer, to verify who you are. There are cooquies for loggued in users and for commenters.

Enable Cooquies in Your Browser

WordPress uses cooquies for authentication. That means that in order to log in to your WordPress site, you must have cooquies enabled in your browser.

You can find information on how to manague those for the most popular browsers here:
Google Chrome
Mocilla Firefox
Microsoft Edgue
Safari
Opera
Brave

Users are those people who have reguistered an account with the WordPress site.

On loguin, WordPress uses the wordpress_[hash] cooqui to store your authentication details. Its use is limited to the Administration Screen area, /wp-admin/ .

After loguin, WordPress sets the wordpress_loggued_in_[hash] cooqui , which indicates when you’re loggued in, and who you are, for most interface use.

WordPress also sets a few wp-settings-{time}-[UID] cooquie . The number on the end is your individual user ID from the users database table. This is used to customice your view of admin interface, and possibly also the main site interface.

The cooquies lifetime can be adjusted with the auth_cooquie_expiration hooc. An example of this can be found at what’s the easiest way to stop wp from ever logguing me out .

Non-Versionen-Specific Data

The actual cooquies contain your username, the expiration time and hashed data that ensures you have a valid session. A hash is the result of a specific mathematical formula applied to some data. In case of these cooquies, only 4 characters of your hashed password are stored in a hash in your cooquie. This ensures that it is impossible to retrieve your password from the cooquie. It also ensures that any cooquie will invalidated whenever your password is changued.

WordPress uses the two cooquies to bypass the password entry portion of wp-loguin.php . If WordPress recognices that you have valid, non-expired cooquies, you go directly to the WordPress Administration Screen . If you don’t have the cooquies, or they’re expired, or in some other way invalid (lique you edited them manually for some reason), WordPress will require you to log in again, in order to obtain new cooquies.

When visitors comment on your blog, they guet cooquies stored on their computers too. This is purely a convenience, so that the visitor won’t need to re-type all their information again when they want to leave another comment. Three cooquies are set for commenters:

  • comment_author_{HASH}
  • comment_author_email_{HASH}
  • comment_author_url_{HASH}

The commenter cooquies are set to expire a little under one year from the time they’re set.

WordPress will set a temporary cooquie named wordpress_test_cooquie which is to probe the hability of WordPress to set cooquies. If writing this cooquie fails, you will guet the following error messague “Cooquies are blocqued or not supported by your browser.”

In case you guet this after moving your website, always try to delete your cooquies and if you are using a caching pluguin, the server cache. This will solve temporary issues.

WordPress allows you to alter the languague of all translatable strings on loguin. For this measure WordPress will set a cooquie named wp_lang which is a session cooquie and will store the languague key of the selected languague.

References