Cookies used in Microsoft 365 web apps and services

Last updated: October 26, 2026

This article lists the cookies used across a set of Microsoft 365 web apps and services. It covers the following principal web surfaces for users:

This article isn't an exhaustive inventory of every service available in your licensed Microsoft 365 plan.

Other Microsoft products may use the cookies listed in this article for other purposes when you interact with those products. Consult the applicable product's documentation for more information. Additionally, not every cookie listed is used in every interaction with a service. Where a cookie isn't always used, this is noted in its purpose description.

Clipchamp

The cookies listed in the following table apply to the use of Clipchamp, Microsoft's online video and photo editor.

Cookie name Domain Duration Purpose
ai_session microsoft.sharepoint-df.com 19 minutes This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
AjaxSessionKey m365.cloud.microsoft 90 days Maintains the user's session for seamless navigation between Microsoft 365 apps.
app_variant microsoft.sharepoint-df.com Session Stores information about the client environment used to access Clipchamp, such as whether the application is running in a browser, Progressive Web App (PWA), or desktop application to optimize service functionality and compatibility across supported platforms.
brcap .login.microsoftonline.com 12 months Required for the Microsoft Entra ID login process to function correctly.
buid login.microsoftonline.com 30 days Helps detect and block automated attacks on the sign-in system.
CCState .login.microsoftonline.com 10 days Tracks the user's authentication state during the sign-in process.
ClientStorageCookie webshell.suite.office.com Session Secures temporary data stored in the user's browser during the user's session.
esctx .login.microsoftonline.com Session Protects against cross-site request forgery attacks during sign-in.
esctx-UlZHVgy9qM .login.microsoftonline.com 10 minutes Protects against cross-site request forgery attacks during sign-in.
ESTSAUTH .login.microsoftonline.com Session Keeps the user signed in during the user's current browser session.
ESTSAUTHLIGHT login.microsoftonline.com Session Keeps the user signed in during the user's current browser session (lightweight version).
ESTSAUTHPERSISTENT .login.microsoftonline.com 90 days Keeps the user signed in to Microsoft services after closing the user's browser to prevent repetitive authentication requests.
FedAuth microsoft.sharepoint-df.com 5 days An authentication cookie that expires after the session, used to identify the user. The cookie maintains the user session token.
fpc login.microsoftonline.com 30 days Identifies problematic sign-in patterns to protect against service abuse.
msal.cache.encryption microsoft.sharepoint-df.com Session Protects the user's login credentials by encrypting authentication data stored in the user's browser.
MC1 .microsoft.com 12 months This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
MSFPC microsoft.sharepoint-df.com 12 months This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
MSPRequ .login.live.com Session Prevents sign-in loops by tracking recent authentication requests.
MS0 .microsoft.com 30 minutes This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
NucleusSessionCookie microsoft.sharepoint-df.com 7 days Measures list library loading performance across multiple SharePoint pages including the Clipchamp home page.
OH.DCAffinity m365.cloud.microsoft 8 hours Ensures the user's requests are routed to the same server for consistent performance.
OH.FLID m365.cloud.microsoft 12 months Assigns the user to feature test groups before the user signs in.
OH.SID m365.cloud.microsoft Session Groups the user's activity during a browser session to help diagnose issues and monitor service health.
OhpAuth m365.cloud.microsoft 90 days Keeps the user signed in to Microsoft 365 services.
OhpAuthC1 m365.cloud.microsoft 90 days Keeps the user signed in to Microsoft 365 services.
OhpAuthC2 m365.cloud.microsoft 90 days Keeps the user signed in to Microsoft 365 services.
OhpCode www.microsoft365.com 15 minutes Stores a single-use short-lived authorization code used during Microsoft 365 sign-in.
OhpToken m365.cloud.microsoft 90 days Keeps the user signed in to Microsoft 365 services.
rtFa .sharepoint-df.com 5 days Keeps the user signed in to SharePoint and related Microsoft services.
ScaleCompatibilityDeviceId microsoft.sharepoint-df.com 7 days Device identifier cookie used for request routing, scale handling, and client compatibility.
SignInStateCookie .login.microsoftonline.com Session Remembers the user's sign-in status during authentication.
SIMI .sharepoint-df.com 5 days Session-related cookie used to maintain identity/session continuity across Microsoft services (similar role to SMI cookie, often part of auth/session state handling). Microsoft-owned session/identity helper cookie from the Microsoft 365/Entra authentication layer (internal, not app-owned).
SPA_RT microsoft.sharepoint-df.com 5 days Refresh token cookie used by SharePoint authentication to silently renew access tokens and keep the user signed in.
stsservicecookie login.microsoftonline.com Session Supports the Microsoft identity service during authentication.
uaid .login.live.com Session Identifies the user's session for diagnostic purposes before the user signs in.
userid m365.cloud.microsoft 90 days Identifies the user within the Microsoft 365 environment.
UserIndex m365.cloud.microsoft 30 days Supports user switching when multiple accounts are available.
x-ms-gateway-slice login.microsoftonline.com Session Routes the user's request to the appropriate Microsoft server infrastructure.

Copilot

The cookies listed in the following table apply to the use of the Microsoft Copilot web experience (copilot.cloud.microsoft).

Cookie name Domain Duration Purpose
ai_session copilot.cloud.microsoft 30 minutes This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
AjaxSessionKey copilot.cloud.microsoft 90 days Maintains the user's session for seamless navigation between Microsoft 365 apps.
CS copilot.cloud.microsoft 12 months Stores internal application state for the Microsoft 365 portal.
MC1 .microsoft.com 12 months This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
msal.cache.encryption copilot.cloud.microsoft Session Protects the user's login credentials by encrypting authentication data stored in the user's browser.
MSFPC copilot.cloud.microsoft 12 months This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
MS0 .microsoft.com 30 minutes This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
OH.DCAffinity copilot.cloud.microsoft 8 hours Ensures the user's requests are routed to the same server for consistent performance.
OH.FLID copilot.cloud.microsoft 12 months Assigns the user to feature test groups before the user signs in.
OH.RNG copilot.cloud.microsoft 90 days Supports internal functionality of the Office Hub experience.
OH.SID copilot.cloud.microsoft Session Groups the user's activity during a browser session to help diagnose issues and monitor service health.
OhpAuth copilot.cloud.microsoft 90 days Keeps the user signed in to Microsoft 365 services.
OhpAuthC1 copilot.cloud.microsoft 90 days Keeps the user signed in to Microsoft 365 services.
OhpAuthC2 copilot.cloud.microsoft 90 days Keeps the user signed in to Microsoft 365 services.
OhpToken copilot.cloud.microsoft 90 days Keeps the user signed in to Microsoft 365 services.
SSREnabled copilot.cloud.microsoft 30 days Indicates whether server-side rendering is enabled for faster page loads.
userid copilot.cloud.microsoft 90 days Identifies the user within the Microsoft 365 environment.
UserIndex copilot.cloud.microsoft 30 days Supports user switching when multiple accounts are available.

Education Insights

The cookies listed in the following table apply to Microsoft Education Insights features on Windows, including Reading Coach, Reading Progress, Search Coach, and Reflect.

Cookie name Domain Duration Purpose
msal.<clientId>.account EDU Hub & Reflect 24 hours Backs up the user's account information when browser storage is unavailable.
msal.<clientId>.credential EDU Hub & Reflect 24 hours Backs up the user's login tokens when browser storage is unavailable.
msal.<clientId>.interaction.status EDU Hub & Reflect Session Prevents duplicate sign-in popups when the user is logging in across multiple tabs.
msal.<clientId>.request EDU Hub & Reflect Session Temporarily stores sign-in request data during the login redirect process.
MSCC Reflect public home pages 13 months Remembers the user's cookie consent preference on the Reflect public website.

Excel for the web

The cookies listed in the following table apply to the use of Excel for the web (excel.cloud.microsoft).

Cookie name Domain Duration Purpose
buid login.microsoftonline.com 30 days Helps detect and block automated attacks on the sign-in system.
esctx .login.microsoftonline.com Session Protects against cross-site request forgery attacks during sign-in.
esctx-* .login.microsoftonline.com Session Protects against cross-site request forgery attacks during sign-in. The portion of the cookie name shows as * represents an alphanumeric string (for example, esctx-J0vFvHNIDDo).
fpc login.microsoftonline.com 30 days Identifies problematic sign-in patterns to protect against service abuse.
MC1 .microsoft.com 12 months This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
MSPRequ .login.live.com Session Prevents sign-in loops by tracking recent authentication requests.
MS0 .microsoft.com 30 minutes This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
OParams .login.live.com Session Temporarily stores sign-in parameters during the login process.
stsservicecookie login.microsoftonline.com Session Supports the Microsoft identity service during authentication.
uaid .login.live.com Session Identifies the user's session for diagnostic purposes before the user signs in.
x-ms-gateway-slice login.microsoftonline.com Session Routes the user's request to the appropriate Microsoft server infrastructure.

Forms

The cookies listed in the following table apply to the use of Microsoft Forms (forms.cloud.microsoft).

Cookie name Domain Duration Purpose
__RequestVerificationToken forms.office.com Session Protects against malicious form submissions and cross-site attacks.
AADAuth.forms .forms.office.com 90 days Keeps the user signed in to Microsoft Forms via Microsoft Entra ID.
ASLBSACORS amcdn.msftauth.net Session Ensures the user's requests are consistently routed to the same authentication server.
FormsWebSessionId forms.office.com 30 days Maintains the user's session while creating or responding to forms.
msal.cache.encryption forms.office.com Session Protects the user's login credentials by encrypting authentication data stored in the user's browser.
MUID .office.com 12 months Used solely to collect security and aggregated usage signals that support service reliability and performance.
OIDCAuth.forms forms.office.com Session Keeps the user signed in to Microsoft Forms.

OneNote for the web

The cookies listed in the following table apply to the use of OneNote for the web (onenote.cloud.microsoft).

Cookie name Domain Duration Purpose
ASLBSACORS amcdn.msftauth.net Session Ensures the user's requests are consistently routed to the same authentication server.
buid login.microsoftonline.com 30 days Helps detect and block automated attacks on the sign-in system.
CCState .login.microsoftonline.com 10 days Tracks the user's authentication state during the sign-in process.
ClientStorageCookie webshell.suite.office.com Session Secures temporary data stored in the user's browser during the user's session.
esctx .login.microsoftonline.com Session Protects against cross-site request forgery attacks during sign-in.
esctx-rQH0U9fgtrc .login.microsoftonline.com Session Protects against cross-site request forgery attacks during sign-in.
ESTSAUTH .login.microsoftonline.com Session Keeps the user signed in during the user's current browser session.
ESTSAUTHLIGHT login.microsoftonline.com Session Keeps the user signed in during the user's current browser session (lightweight version).
ESTSAUTHPERSISTENT .login.microsoftonline.com 180 days Keeps the user signed in to Microsoft services after closing the user's browser to prevent repetitive authentication requests.
fpc login.microsoftonline.com 30 days Identifies problematic sign-in patterns to protect against service abuse.
HP.SID onenote.cloud.microsoft Session Allows the user to stay signed in across multiple browser tabs and windows.
HP.UID onenote.cloud.microsoft Session Identifies the user consistently across multiple browser tabs and windows.
MC1 .microsoft.com 12 months This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
MUID .office.com 12 months Used solely to collect security and aggregated usage signals that support service reliability and performance.
MS0 .microsoft.com 30 minutes This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
SignInStateCookie .login.microsoftonline.com Session Remembers the user's sign-in status during authentication.
stsservicecookie login.microsoftonline.com Session Supports the Microsoft identity service during authentication.
x-ms-gateway-slice login.microsoftonline.com Session Routes the user's request to the appropriate Microsoft server infrastructure.

Outlook on the web

The cookies listed in the following table apply to the use of Outlook on the web (outlook.cloud.microsoft).

Cookie name Domain Duration Purpose
ai_session teams.microsoft.com 29 minutes This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
brcap .login.microsoftonline.com 12 months Required for the Microsoft Entra ID login process to function correctly.
buid login.microsoftonline.com 30 days Helps detect and block automated attacks on the sign-in system.
CCState .login.microsoftonline.com 10 days Tracks the user's authentication state during the sign-in process.
ClientId outlook.office.com 12 months Identifies device for debugging and troubleshooting purposes.
DefaultAnchorMailbox outlook.office.com 24 hours Identifies user for mailbox routing.
esctx .login.microsoftonline.com Session Protects against cross-site request forgery attacks during sign-in.
esctx-krg17hDYeHM .login.microsoftonline.com Session Protects against cross-site request forgery attacks during sign-in.
ESTSAUTH .login.microsoftonline.com Session Keeps the user signed in during the user's current browser session.
ESTSAUTHLIGHT login.microsoftonline.com Session Keeps the user signed in during the user's current browser session (lightweight version).
ESTSAUTHPERSISTENT .login.microsoftonline.com 90 days Keeps the user signed in to Microsoft services after closing the user's browser to prevent repetitive authentication requests.
fpc login.microsoftonline.com 30 days Identifies problematic sign-in patterns to protect against service abuse.
MicrosoftApplicationsTelemetryDeviceId outlook.office.com 12 months This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
MicrosoftApplicationsTelemetryFirstLaunchTime outlook.office.com 12 months This cookie may not be used in every interaction with the service. Where it is used, it is used solely to collect aggregated usage metrics that support service reliability and performance.
msal.cache.encryption outlook.office.com Session Protects the user's login credentials by encrypting authentication data stored in the user's browser.
MSFPC outlook.office.com 12 months This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
MUIDB teams.microsoft.com 12 months Used solely to collect security and aggregated usage signals that support service reliability and performance.
OIDC outlook.office.com 183 days Used as part of authentication flow to sign in the user.
OpenIdConnect.nonce.v3.<token> outlook.office.com 60 minutes Used as part of authentication flow to sign in the user.
OWAAppIdType outlook.office.com 30 days Indicates application ID type used in Outlook Web Authentication (OWA) flows.
SignInStateCookie .login.microsoftonline.com Session Remembers the user's sign-in status during authentication.
stsservicecookie login.microsoftonline.com Session Supports the Microsoft identity service during authentication.
SuiteServiceProxyKey outlook.office.com 1 day Used as part of authentication flow to sign in the user.
UC outlook.office.com Session Used as session cache key between client/server state.
wlidperf .microsoftonline.com 12 months Used by Microsoft authentication services to collect client-side timing information for performance monitoring and optimization of sign-in experiences. The cookie helps measure and improve the responsiveness and reliability of authentication processes and does not store user profile information.
x-ms-gateway-slice login.microsoftonline.com Session Routes the user's request to the appropriate Microsoft server infrastructure.
x-ocditid outlook.office.com 30 days Used for redirect reliability.

PowerPoint for the web

The cookies listed in the following table apply to the use of PowerPoint for the web (powerpoint.cloud.microsoft).

Cookie name Domain Duration Purpose
buid login.microsoftonline.com 30 days Helps detect and block automated attacks on the sign-in system.
Esctx .login.microsoftonline.com Session Protects against cross-site request forgery attacks during sign-in.
esctx-* .login.microsoftonline.com Session Protects against cross-site request forgery attacks during sign-in. The portion of the cookie name shows as * represents an alphanumeric string (for example, esctx-J0vFvHNIDDo).
fpc login.microsoftonline.com 30 days Identifies problematic sign-in patterns to protect against service abuse.
MC1 .microsoft.com 12 months This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
MSPRequ .login.live.com Session Prevents sign-in loops by tracking recent authentication requests.
MS0 .microsoft.com 30 minutes This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
OParams .login.live.com Session Temporarily stores sign-in parameters during the login process.
stsservicecookie login.microsoftonline.com Session Supports the Microsoft identity service during authentication.
Uaid .login.live.com Session Identifies the user's session for diagnostic purposes before the user signs in.
x-ms-gateway-slice login.microsoftonline.com Session Routes the user's request to the appropriate Microsoft server infrastructure.

SharePoint

The cookies listed in the following table apply to the use of SharePoint in Microsoft 365.

Cookie name Domain Duration Purpose
brcap .login.microsoftonline.com 12 months Required for the Microsoft Entra ID login process to function correctly.
buid login.microsoftonline.com 30 days Helps detect and block automated attacks on the sign-in system.
CCState .login.microsoftonline.com 10 days Tracks the user's authentication state during the sign-in process.
cucg *.sharepoint.com 24 hours Stores/indicates "can user create group" permission state used by SharePoint Server.
esctx .login.microsoftonline.com Session Protects against cross-site request forgery attacks during sign-in.
esctx-* .login.microsoftonline.com Session Protects against cross-site request forgery attacks during sign-in.
EsseESPA_RT *.sharepoint.com 5 days Refresh token cookie used by SharePoint authentication to silently renew access tokens and keep the user signed in.
ESTSAUTH .login.microsoftonline.com Session Keeps the user signed in during the user's current browser session.
ESTSAUTHLIGHT login.microsoftonline.com Session Keeps the user signed in during the user's current browser session (lightweight version).
ESTSAUTHPERSISTENT .login.microsoftonline.com 90 days Keeps the user signed in to Microsoft services after closing the user's browser to prevent repetitive authentication requests.
FedAuth *.sharepoint.com 5 days An authentication cookie that expires after the session, used to identify the user. The cookie maintains the user session token.
fpc login.microsoftonline.com 30 days Identifies problematic sign-in patterns to protect against service abuse.
https%3A%2F%2F...%2FDiscovery *.sharepoint.com 30 days Stores whether a user has already accepted a required SharePoint notice or onboarding experience for a specific SharePoint page, preventing the notice from being shown repeatedly and enabling the service to maintain the appropriate acceptance state.
msal.cache.encryption *.sharepoint.com Session Protects the user's login credentials by encrypting authentication data stored in the user's browser.
rtFa .sharepoint.com 5 days Keeps the user signed in to SharePoint and related Microsoft services.
ScaleCompatibilityDeviceId *.sharepoint.com 7 days Device identifier cookie used for request routing, scale handling, and client compatibility.
SignInStateCookie .login.microsoftonline.com Session Remembers the user's sign-in status during authentication.
SIMI .sharepoint.com 5 days Session-related cookie used to maintain identity/session continuity across Microsoft services (similar role to SMI, often part of auth/session state handling). Microsoft-owned session/identity helper cookie from the Microsoft 365/Entra authentication layer (internal, not app-owned).
SPHomeWeb:NGSP/experienceActive *.sharepoint.com Session Used by first-party SharePoint code to check whether a newly flighted feature (New Generation SharePoint) experience is enabled.
SPWorkLoadAttribution *.sharepoint.com Session Used by SharePoint server-side diagnostics/logging and workload attribution.
stsservicecookie login.microsoftonline.com Session Supports the Microsoft identity service during authentication.
wlidperf .microsoftonline.com 12 months Used by Microsoft authentication services to collect client-side timing information for performance monitoring and optimization of sign-in experiences. The cookie helps measure and improve the responsiveness and reliability of authentication processes and does not store user profile information.
x-ms-gateway-slice login.microsoftonline.com Session Routes the user's request to the appropriate Microsoft server infrastructure.

Teams

The cookies listed in the following table apply to the use of Microsoft Teams.

Cookie name Domain Duration Purpose
brcap .login.microsoftonline.com 12 months Required for the Microsoft Entra ID login process to function correctly.
buid login.microsoftonline.com 30 days Helps detect and block automated attacks on the sign-in system.
CCState .login.microsoftonline.com 10 days Tracks the user's authentication state during the sign-in process.
esctx .login.microsoftonline.com Session Protects against cross-site request forgery attacks during sign-in.
esctx-VrFVHm0L5Ns .login.microsoftonline.com Session Protects against cross-site request forgery attacks during sign-in.
ESTSAUTH .login.microsoftonline.com Session Keeps the user signed in during the user's current browser session.
ESTSAUTHLIGHT login.microsoftonline.com Session Keeps the user signed in during the user's current browser session (lightweight version).
ESTSAUTHPERSISTENT .login.microsoftonline.com 90 days Keeps the user signed in to Microsoft services after closing the user's browser to prevent repetitive authentication requests.
fpc login.microsoftonline.com 30 days Identifies problematic sign-in patterns to protect against service abuse.
msal.cache.encryption teams.cloud.microsoft Session Protects the user's login credentials by encrypting authentication data stored in the user's browser.
MC1 .microsoft.com 12 months This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
MicrosoftApplicationsTelemetryDeviceId teams.cloud.microsoft 12 months This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
MUIDB teams.cloud.microsoft 12 months Used solely to collect security and aggregated usage signals that support service reliability and performance.
platformId teams.cloud.microsoft 12 months Identifies the client platform (for example, web, desktop, or mobile) to ensure correct service routing and feature behavior.
SignInStateCookie .login.microsoftonline.com Session Remembers the user's sign-in status during authentication.
stsservicecookie login.microsoftonline.com Session Supports the Microsoft identity service during authentication.
wlidperf .microsoftonline.com 12 months Used by Microsoft authentication services to collect client-side timing information for performance monitoring and optimization of sign-in experiences. The cookie helps measure and improve the responsiveness and reliability of authentication processes and does not store user profile information.
x-ms-gateway-slice login.microsoftonline.com Session Routes the user's request to the appropriate Microsoft server infrastructure.

Word for the web

The cookies listed in the following table apply to the use of Word for the web (word.cloud.microsoft).

Cookie name Domain Duration Purpose
buid login.microsoftonline.com 30 days Helps detect and block automated attacks on the sign-in system.
esctx .login.microsoftonline.com Session Protects against cross-site request forgery attacks during sign-in.
esctx-* .login.microsoftonline.com Session Protects against cross-site request forgery attacks during sign-in. The portion of the cookie name shows as * represents an alphanumeric string (for example, esctx-J0vFvHNIDDo).
fpc login.microsoftonline.com 30 days Identifies problematic sign-in patterns to protect against service abuse.
HP.SID word.cloud.microsoft Session Allows the user to stay signed in across multiple browser tabs and windows.
MC1 .microsoft.com 12 months This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
MSPRequ .login.live.com Session Prevents sign-in loops by tracking recent authentication requests.
MS0 .microsoft.com 30 minutes This cookie may not be used in every interaction with the service. Where it is used, it is used solely to support the reliability, performance, and security of the service, such as maintaining session continuity, routing requests, load balancing, and monitoring service health and errors.
OParams .login.live.com Session Temporarily stores sign-in parameters during the login process.
stsservicecookie login.microsoftonline.com Session Supports the Microsoft identity service during authentication.
uaid .login.live.com Session Identifies the user's session for diagnostic purposes before the user signs in.
x-ms-gateway-slice login.microsoftonline.com Session Routes the user's request to the appropriate Microsoft server infrastructure.
  • Last updated on