What is the wordpress_test_cookie cookie?
wordpress_test_cookie is a native cookie generated automatically by WordPress core code (set on the wp-login.php page), not tied to any plugin or third-party service.
It typically appears when a visitor loads the login page or, in some setups, the admin dashboard. Most front-end visitors of a site never encounter it, unless the site exposes a login form on public pages.
What data it stores
The cookie's value is fixed and simple: the text string WP Cookie check, with no unique identifiers, IP addresses, or other personal data attached.
It is stored only in the visitor's local browser, is not sent to third-party servers, and is not read by analytics or advertising tools. Its purpose is purely technical, at the browser level.
What it is used for
WordPress sets this cookie to check, right after the login form is submitted, whether the cookie was successfully retained by the browser. If it's missing on page reload, WordPress shows an error message telling the user to enable cookies in order to log in.
In practice, it prevents login failures from being confused with wrong credentials when the real cause is blocked cookies.
Does it require consent?
It is classified as a strictly necessary cookie, since it directly supports a functionality explicitly requested by the user (logging into the admin area). Under Article 5(3) of the ePrivacy Directive, cookies strictly necessary to provide a service requested by the user are exempt from prior consent.
- It should not appear as an opt-out toggle in the consent banner.
- It should still be disclosed, with purpose and duration, in the site's cookie policy, per GDPR transparency requirements.
- It typically applies only to the admin/login area, not public-facing pages.
How to block or delete wordpress_test_cookie
A visitor can delete or block the cookie manually via browser settings (Chrome, Firefox, Edge – per-site cookie management), but this will prevent logging into WordPress until cookies are re-enabled.
For site owners wanting centralized control over all cookies, a CMP like CookieFix can automatically block scripts in categories that require consent until the visitor responds; strictly necessary cookies like this one remain active regardless, since they are essential to the site's functioning.
Frequently asked questions
No. It contains no personal identifiers and is not used for analytics or advertising — only to technically verify that the browser accepts cookies.
No, it's strictly necessary for the login function and is exempt from consent requirements under ePrivacy, though it must still be listed in the site's cookie policy.
You won't be able to log into the WordPress dashboard, since the system can't confirm your browser retains cookies.
It's a session cookie — it's automatically deleted when you close your browser and has no fixed expiration date.