Passphrase for cookie encryption profile

Question

Is it mandatory to enable and provide "Cookie Encryption Passphrase" while creating a http profile for cookie encryption.&nbsp;
At present I have created a http profile with no passphrase and the cookie is not encrypted. Is it possible that F5 uses any default passphrase if we do not check the Cookie Encryption Passphrase box . &nbsp;

binarycanary_19 · Accepted Answer

If you want cookie encryption, then yes. A passphrase is mandatory, as well as the names of the cookies you want encrypted.&nbsp;
No, cookies are not encrypted by default.&nbsp;

prasath_varatha · Answer

Thanks for your reply. Can I know why a passpharse is required to encrypt cookie, how it works ? if you give/suggest a link learn them it would be helpful. Thanks again.

Forum Discussion

Passphrase for cookie encryption profile

2 Replies

Recent Discussions

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

Pricing when used with aws waf

F5 terminal - help to run commands - disk space full

import live updates from version x to version y

Tenant image upgrade

Related Content

AS3 TLS certificate without passphrase

Password Safety & Security: Passwords vs. Passphrases

Server Profile SNI

Update your DevCentral user profile

Lock and Key - Encrypting EBS Disk Volumes for BIG-IP AWS Deployments