Trade Cookies

← Home

---

Trade Cookies

POE2Fixer needs two cookies from your pathofexile.com browser session to make trade requests on your behalf:

• POESESSID — your logged-in session token.
• cf_clearance — Cloudflare anti-bot clearance cookie.

These are entered manually in Configuration → Settings → Trade Cookies. The values are encrypted at rest (Windows DPAPI, machine-bound) and held in memory inside a SecureString that scrubs itself on app exit.

How to get them

1. Open https://www.pathofexile.com in your regular browser (Chrome, Edge, or Firefox) and log in. Complete the Cloudflare check if it appears.

2. Press F12 to open DevTools.

3. Go to the Application tab (Chrome / Edge) or Storage tab (Firefox) → Cookies → select pathofexile.com.

4. Find the POESESSID row, double-click its Value, press Ctrl+C.

   (Screenshot: DevTools showing POESESSID highlighted)

5. In POE2Fixer, click the 📋 Paste button next to POESESSID in Settings.

6. Repeat for cf_clearance.

When to refresh

• POESESSID expires when you log out of pathofexile.com in your browser, or after a few weeks of inactivity. If trade stops working with HTTP 401, refresh both cookies.
• cf_clearance expires after ~1 hour of being unused, or whenever Cloudflare decides to re-challenge you. If trade returns HTTP 403, refresh cf_clearance.

Security

• Stored as a single DPAPI blob: Configs/general/cookies.dat. The file is unreadable on any other machine.
• The config.json file does not contain cookies (they're separate to avoid leaking via plaintext config).
• The Settings UI does not allow copying values back out — the masked display uses an uncopyable label, not a text input. The reveal button shows the value in-place for verification only.

---

← Home