How to log in with cookies: Facebook, Instagram and X accounts on desktop and mobile
Many deliveries end with a long string such as c_user=1000...;xs=.... That's the cookie. Here's how to use it.
What cookies are and why to use them first
Cookies are how a website remembers that a browser is already logged in. Importing them continues the account's existing session, so you don't need to enter the password or a code.
A password login on a new device gets checked as a new login, which often triggers a checkpoint or even a lock. A cookie login skips that step, so it's less likely to trigger verification.
It isn't a guarantee, though. A far-off IP or aggressive activity can still get the account checked or banned.
Before you start
- Set up your IP: use a fixed IP in the account's region and connect before importing. See What a residential proxy is
- Use a clean browser environment: one separate browser profile per account, never shared with your own or other accounts
- Find the cookie field: copy all of it with no extra spaces. The product description states the delivery format
Get the Cookie-Editor extension
It's free. Pick your browser; these are the official store pages:
- Chrome: Install from the Chrome Web Store
- Edge: Install from Edge Add-ons
- Firefox (desktop and Android): Install from Firefox Add-ons
- iPhone / iPad (Safari): Install from the App Store
We didn't make this extension; its official site is cookie-editor.com. Install only from the official stores. Lookalike extensions or installers from elsewhere can read your login data on every site.
On desktop
Using Chrome or Edge as the example; other browsers are similar:
- Create a new browser profile and install Cookie-Editor there
- Open the site, for example facebook.com, without logging in
- Open Cookie-Editor and delete all cookies for that site
- Click Import, paste the cookies and confirm
- Refresh the page. If you see the account's home page, you're in
If it says the format is wrong, add cookies by hand. The key ones listed below are enough.
On a phone
The official apps can't import cookies, so on a phone you can only log in to the website in a browser.
Android: install Firefox, add the extension from the Firefox Add-ons page, then follow steps 2 to 5 above.
iPhone: install Cookie-Editor from the App Store, turn it on under Safari extensions in the Settings app and allow it on the site you're logging in to. Then follow steps 2 to 5 above in Safari.
To use the app long term, log in there with the password and 2FA. Confirm the account works on the web first. For 2FA keys, see how to turn a 2FA key into a login code.
Key cookies by platform
When adding by hand, these are the essentials, with the domain in brackets:
- Facebook (.facebook.com): c_user, xs, plus datr, fr and sb if you have them
- Instagram (.instagram.com): sessionid, ds_user_id, csrftoken, plus mid and ig_did if you have them
- X / Twitter (.x.com): auth_token, ct0
- TikTok (.tiktok.com): sessionid
For other platforms or formats, import the delivery in full.
If it doesn't work
Still on the login page after refreshing: the cookies may have expired or been copied incompletely. Delete the old cookies and import the full string again. If that fails, use the password.
A checkpoint or lock appears: check that your IP matches the account's region, and don't keep refreshing or retrying. For Facebook, see Facebook account disabled? What to do.
Logged out again later: usually the IP or browser environment changed. Keep them fixed.
After you log in
- Browse normally for a few days. Don't change the password or email or do anything in bulk right away. Changing the password can also invalidate these cookies
- Don't click Log out casually; the cookies usually stop working afterwards
- Back up your delivery. Cookies are as good as a login, so never share them or paste them into online converters
For the full Facebook routine, read First login on a purchased Facebook account.
Support