webzod
account

Add Secure to SameSite=None cookies on Shopify

headers.cookies.samesite_none_insecure · effort: minutes

Why it matters

Browsers reject a cookie marked SameSite=None unless it also has Secure, so this cookie is silently dropped and whatever depends on it, such as an embedded widget or a login, fails. Add Secure, or use SameSite=Lax if the cookie is not needed in cross-site requests.

Staged change. Do this in stages and check each one before the next, so a mistake does not break your site or your mail.

The fix

Not possible on Shopify. Shopify sets the storefront's own cookies and stores cannot change their attributes. If the cookie belongs to an installed app, ask the app's developer.

Read the documentation (opens in a new tab)

Scan your domain to see whether this applies to you.