WebSession, a Secure Replacement for Cookies

In plain words

WebSession is a secure alternative to traditional cookies for managing user sessions in web applications. It's designed for developers building websites that need reliable session management without the limitations of standard cookie approaches. The tool launched in October 2023 and focuses on providing enhanced security features for session handling, making it particularly useful for applications that prioritize protecting user data and authentication integrity.

written from the facts on this page · September 2026

From the sources

This is a work in progress, based on my talk at Identiverse 2023. It’s intended to be a starting point for discussion, not a complete or unambiguous spec. Please get in touch if you have questions, comments, or suggestions; I’ll update this page once I find a good locus for further discussion. We need a protocol that is dedicated to session maintenance, that gives control back to the user either through prior browser configuration or a consent-on-first-visit model. Browsers could use system-native, accessible UIs that don’t interrupt content loading or page layout. WebSession does not rely on bearer tokens. Instead, the browser and server agree on a shared secret at the…from websession.dev

• 
  Marktag2023 · markopolo.ai · ▲313

  All-in-one pixel to recapture audiences for cookieless era

• 
  Modern Browsers Don't Need the Cookie AnymoreAug 2026 · kuber.studio · ▲26

  A live demonstration of everything a website learns about you before you click anything. No cookies, no permissions, no consent dialog. Nothing is stored.

• 
  ShareAccount2017 · shareaccount.nicosantangelo.com · ▲167

  Share your account without giving out your password

• 
  Shynet2021 · github.com · ▲81

  Modern, privacy friendly, and cookie free web analytics

• 
  SessionForward – Simple user session replays and heatmaps2020 · sessionforward.com · ▲47

  SessionForward: Automatic Web and App Optimizations Powered By AI.

• DB
  Device-Bound Session Tokens in JavaScript2024 · session-lock.keyri.com · ▲23

  Google’s recent announcement of a proposed ‘Device Bound Session Credentials’ feature[1] for Chrome reminded me of a project we worked on last year at my company. We focus on fraud prevention at signup and login (preventing multi-accounting and account theft), but some customers were concerned about post-login security and asked us to add a session hijacking prevention feature to our fraud prevention API. In the end, we decided to just implement a solution in Javascript. We call it session-lock, and it can be used today across all browsers[2] and, theoretically, native mobile apps. For a…

• 
  SimCity, but with Permits▲926

  A free city-building game in your browser. You are the mayor. You know what the city needs. Now get it past the zoning board, the neighbors, the appeals court and the next election.

  Life & fun · 2d ago · permit.petercai.com

• IV
  I've been paying for a rural Tanzanian's education for 10 years▲778

  Life & fun · 14d ago · tanzaniaeducationproject.org

• 
  Bigwords.page – Turn any screen into a sign. The URL is the app▲728

  Turn a phone, tablet or TV into a sign. Type a message and it fills the screen: welcome signs, timers, Wi-Fi passwords and more. No app, no account, free.

  Life & fun · 15d ago · bigwords.page

• 
  Guitoro, a virtual guitar you strum with your keyboard▲573

  Play a free virtual guitar online with your keyboard or by touch. Slow songs down and see every chord, string and strum. Acoustic, classic, electric and bass.

  Life & fun · 9d ago · guitoro.com

• 
  See *almost* any carriers phone settings▲432

  Carrier settings from iPhone, Pixel and Galaxy firmware, decoded and compared: APNs, VoLTE, 5G and Wi-Fi Calling per carrier, and what each build changed.

  Life & fun · 13d ago · carrierexplode.com

• 
  The whole Solar System and every tracked satellite, live in the browser▲407

  Life & fun · 23d ago · space.bl2.net

• 
  AI Content Genie▲1,071

  AI autopilot for content creation & marketing

  AI · 2023 · typeface.ai

• 
  Nudge 2.0▲1,051

  In-app experiences to activate, retain, & understand users

  Growth · 2023 · nudgenow.com

• 
  Cal.ai Email Assistant▲918

  World's first open source AI scheduling assistant

  AI · 2023 · cal.com

• 
  Design Studio by Tiledesk▲867

  Unlock AI magic for elevated customer engagement, fast

  AI · 2023 · tiledesk.com

• 
  TalkNotes▲854

  Turn your thoughts into actionable notes, fast

  AI · 2023 · talknotes.io

• 
  OpenAPI DevTools – Chrome extension that generates an API spec▲811

  Effortlessly discover API behaviour with a Chrome extension that automatically generates OpenAPI specifications in real time for any app or website.

  Dev tools · 2023 · github.com