The 'remember my login' cookie
The 'remember my login' cookie is a long-lived HTTP cookie. This cookie can be used to authenticate an unauthenticated session. This cookie generates when the user selects the Remember my login on this computer check box or Remember me on the login page.
- For the original login functionality: The 'remember me' cookie key is
- For the new login functionality: The 'remember me' cookie key is
Cookie key and contents
The cookie contains a unique identifier plus a securely-generated random string (i.e. token).
Use of cookie for authentication
When a user requests a web page, if the request is not already authenticated via session-based authentication or otherwise, Atlassian products will match the 'remember my login' cookie (if present) against the token (also if present), stored for the user.
If the random string matches the value stored in the database and the cookie has not expired, the user is authenticated.
Life of 'remember my login' cookies
The value is the system default value and is not configurable.
- For the original login functionality: The life of the remember me cookies is 14 days.
- For the new login functionality: The life of the remember me cookies is 30 days.
There are several cookies in the cloud that are used for storing basic presentation states, like the number of log lines to show and which tab was previously selected. They are:
Helps prevent XSRF attacks. Ensures that during a user's session, browser requests sent to a product are originated from that product instance. For more information about XSRF checking by Jira applications, see Form Token Checking on the Atlassian Developers site.
|Your Atlassian product's Server ID, a securely-generated random string (i.e. token) and a flag that indicates whether or not the user was logged in at the time the token was generated.||At the end of every session or when the browser is closed.|
|Stores the most recently used projects. Used by Atlassian products to track recently viewed projects for the user.||The project keys of all the recently viewed projects, each seperated by the string '-_-'.||One year from the date it is set or was last updated.|
Tracks which general tabs were last used or expansion elements were last opened or closed.
|One or more key-value strings that indicate the states of your last general tab views or expansion elements.||One year from the date it is set or was last updated.|