What is the remember_web_ cookie?
remember_web_ is a cookie generated automatically by Laravel, a widely used PHP framework for building web applications. The full cookie name is not fixed — after the "remember_web_" prefix comes a unique hash identifier that Laravel generates per application (typically tied to the project's authentication configuration).
The cookie only appears on sites running Laravel that offer users a "remember me" option on the login form. It is set by the server itself, not by a third-party script, at the moment the user logs in and selects this option.
What data it stores
The cookie stores a unique "remember" token generated by Laravel and linked to the user's account in the application's database. The value is a hashed/encrypted combination of the user identifier and a secret token, and does not contain the plain-text password.
- Data stays exclusively on the server of the site in question (not shared with third parties).
- Used only by the same application to check, on later visits, whether the session can be automatically restored.
What it is used for
The cookie's role is purely functional: it lets the user remain logged in even after closing the browser or after the current session expires, avoiding the need to re-enter login credentials each time. This is a standard convenience feature on web applications with user accounts (online stores, SaaS platforms, portals, admin panels).
For the site owner, this cookie is essential for the correct operation of the persistent-login mechanism — without it, the "remember me" option would not work.
Does it require consent?
In CookieFix's classification, remember_web_ falls under necessary (strictly necessary). Since it is indispensable for a functionality explicitly requested by the user (staying logged in), it does not require prior consent under Article 5(3) of the ePrivacy Directive.
- It should not be listed as an opt-out choice in the consent banner.
- It must still be disclosed in the site's cookie policy, with purpose, duration, and provider (the site's own application, via Laravel).
- The site owner should ensure the cookie's security attributes (Secure, HttpOnly, SameSite) are properly configured in the Laravel application.
How to block or delete remember_web_
A visitor can delete or block this cookie manually from browser settings (Chrome, Firefox, Edge, Safari — per-site cookie management). Blocking it will cause automatic logout once the session ends, even if "remember me" had been selected.
Since it is a strictly necessary cookie, site functionality should not be broken if it is blocked — the user will simply need to log in again on each visit. A CMP such as CookieFix can help classify this cookie correctly as "necessary" and disclose it transparently in the cookie policy, without auto-blocking it pending consent, unlike statistics or marketing cookies.
Frequently asked questions
It's a technical cookie set by applications built on the Laravel framework, used to keep a user logged in via the "remember me" login feature.
It's set directly by the website's own web application (not a third party) when it's built with Laravel and the user selects the persistent-login option.
No. Since it's strictly necessary for the persistent login feature the user requested, it doesn't require consent under ePrivacy/GDPR, but it must be disclosed in the cookie policy.
The typical duration is around 5 years, though the exact value can vary depending on how the Laravel application is configured.