// http header · request header
Cookie
Cookies previously set by the server
What the Cookie header does
The Cookie header sends cookies the server previously set (via Set-Cookie) back on each request to the same site — the mechanism behind sessions and logins. It's sent automatically by browsers, which is why CSRF protections and the SameSite attribute matter.
Example
Cookie: sid=abc123Where it's used
Cookie is a request header. Request headers are sent by the client to describe the request and what the client can accept.