iOS 10.3 Safari cookies won't delete

Is anyone having any issues with cookies in 10.3 Safari? Cookies don't seem to delete when I try to remove them using all the delete methods. Additionally, when I block cookies, cookies still get stored.


May be cookies settings have changed and I need to change something. Does anyone know?

iPhone 6s

Posted on Mar 30, 2017 4:40 PM

Reply
Question marked as Top-ranking reply

Posted on Dec 27, 2017 12:59 PM

I've had the same issue with being unable to delete a number of "0 Bytes" cookies on my iPad for a while, but recently an eBay.co.uk cookie of 508KB size began to exhibit the same behaviour - at which point I "snapped", enough is enough! I found a solution, however it's a little long-winded and requires a Mac:


  1. Connect the iOS device to a Mac and create a backup using iTunes
  2. Open the backup using an explorer/editor tool such as iBackupBot (I was a little dubious about using this at first, but it was signed by a registered developer and did not require installation nor did it ask for a password input at any stage, so pretty safe)
  3. Navigate to the folder "User App Files > com.apple.mobilesafari > Library > Webkit > Website Data"
  4. Delete all files and folders in the enclosed IndexedDB folder - this is where the 508KB of eBay data seemed to be
  5. Delete all files and folders in the enclosed WebSQL folder - where all the other "0 Bytes" cookies are stored. I was amazed there were even cookies in here which didn't show up in the Website Data view in Settings. Mine had a whole trove of cookies from argos.co.uk, ebay.co.uk, and uk.farnell.com amongst others.
  6. Restore the backup to your iOS device using iTunes


This was sucessful for me on both my iPad Pro and iPhone SE - both on iOS 10.3.3. I can't confirm if it will work for iOS 11 devices, but from what I've read many people have found the cookie problem to be fixed in 11.1.2.

202 replies

Jun 5, 2017 4:50 AM in response to tygb

Again, tygb, this is about iOS safari, not macOS safari.


The cookies in question fingerprint a browser, which is a unique identification of sorts, and they track you wherever you go even in private browsing mode. When you get into a website such as identity.com, which is in the business of selling information about you to anyone who asks, that's a real problem.


Here's a explainer article from 2015 about the flaw Apple has not fixed.

http://www.businessinsider.com/super-cookies-hsts-security-private-2015-1

"Apple users are particularly vulnerable, as their devices do not have a function that lets users delete super cookies from their browsers."

HSTS Supercookies cannot be deleted except by completely resetting the phone. What I am asking Apple to do at minimum is to provide a way to delete all cookies that actually works for all cookies.

Jun 5, 2017 10:27 AM in response to Ryanthered

The user cannot change website behaviour , the website developers better knows , once you browse the website , cookies will be saved , set to private browsing and avoid saving cookies may be it is for iOS Safari or Mac OS Safari , of course in Apple iOS you have to reset the phone completely , you can send a brief feed back to Apple , so that they will definitely read it .

Jun 5, 2017 10:49 AM in response to tygb

I recognize you are trying to be helpful.


Long post ahead not intended to rant but in the interest of technical facts to drive the resolution :


the cookies we are talking about can be read and possibly persistently set even in private browsing mode because the vector for these 'supercookies' is the HSTS support in the browser on the device. Even in private browsing mode it is trivial to fingerprint the browser and store that unique id. Private browsing only is intended to clear history etc when you're done with your session and what I'm saying is these supercookies aren't reliably removed then either.


The problem is both malicious developers and non malicious developers can use this pathway and currently there is no way to control it even with extensions like content blockers. This results in a great reduction in internet privacy even if you use a VPN, dnscrypt, and so on because they have a fingerprint of your specific browser and can track you wherever.


The cookies also cannot be deleted on iOS safari because the user cannot delete "caches" i.e. a type of local storage object used like a cookie. Therefore when you choose to delete cookies these caches are not deleted.


To get a resolution we are saying allow the caches to be deleted on iOS without completely resetting your phone on every new supercookie infection.

Jun 13, 2017 11:09 AM in response to DontFailMeApple

I've been having the same trouble for some time. Currently the cookie with zero bytes, that is showing is congress.gov, that is on my iPhone se, I am unable to remove it. This is a problem with Safari itself & has been going on for some time. On my iPad its google.com & congress.gov, this is extremely dangerous for Apple users. I also have no way of clicking on links to open as it goes directly to Safari, I have to copy the link and use the browser I use. I've gone to Privacy|Analytics Data and what I am seeing is frighting. I have a crash that says {"app_name":"Unknown""timestamp......how do you fix an unknown app, exeption type: (SIGKILL), filtered syslog: none found, I have no way of updateing to the current version with the new security features because a bug hit the brain service, iTunes is of no use because it just recreates the problem. The problem is maybe an SQL injection, not sure. But I can not for the life of me remove these cookies that falsly say Zero Bytes but track you just the same. Please lmk if you've found a work around, thanks

Jun 14, 2017 10:44 AM in response to nodataonse

That's pretty much the work-around I've been using. Check out the Aloha app, I love it. The copy paste isn't much fun but worth it. They are working on one for the iPad. You may also want to check out gnu.org, they're work is pretty amazing. The way Safari is configured to connect to your mail, & abc, with no way to change that is something I may consider working on, I hope the Engineers get this one out of the way, far too much memory leaks. Thanks for the response

Jul 17, 2017 11:09 AM in response to DontFailMeApple

I have been so frustrated with this problem. I only use Safari for my iOS devices, iPhone and iPad.

I have gone into the advanced section and deleted each cookie. They appear to disappear but when I check again all of the cookies are there many with mb of data and many with data of 0.


Cookies should always be able to be deleted. You can still login to sites as your login is what your account is based on.

I have never had this problem with previous versions of Safari.


Apple where is the fix to this obvious bug?

Jul 19, 2017 2:59 PM in response to IdrisSeabright

IdrisSeabright wrote:


Pack-n-Heat wrote:


But isn't it interesting i had to use Firefox to post this as Safari on my mac wouldn't work on this site?

I'm sure if you start your own thread, someone will be able to help you resolve your issue. Safari works just fine posting on these forums for me and lots of other people.

But it's so much more fun to pretend that it doesn't.

Jul 19, 2017 3:39 PM in response to Lawrence Finch

Lawrence Finch wrote:


IdrisSeabright wrote:


Pack-n-Heat wrote:


But isn't it interesting i had to use Firefox to post this as Safari on my mac wouldn't work on this site?

I'm sure if you start your own thread, someone will be able to help you resolve your issue. Safari works just fine posting on these forums for me and lots of other people.

But it's so much more fun to pretend that it doesn't.

And I can't activate the FM radio.....

Jul 24, 2017 6:07 AM in response to Lumens

Same here, not fixed.


Would like to access the filesystem from my computer to clean it. Did such stuff in the past, but then read it is not possible anymore. Deleted all Temp folders in the apps. Some needed to be reinstalled. I understand, that you shouldn't do this, but even all apps can set what they want (cookies etc.) and don't let you clean up and spy on you.

And in Safari now the same. Option to get rid of that stuff, but does not work. Too bad.




<Edited by Host>

Jul 24, 2017 6:11 AM in response to alltakenalready

alltakenalready wrote:


Same here, not fixed.


Would like to access the filesystem from my computer to clean it. Did such stuff in the past, but then read it is not possible anymore. Deleted all Temp folders in the apps. Some needed to be reinstalled. I understand, that you shouldn't do this, but even all apps can set what they want (cookies etc.) and don't let you clean up and spy on you.


If you believe an app is spying on you, get rid of it. Apps don't need cookies to save data about you; apps have a database to save anything they want. More to the point, if you believe your phone or Apple is spying on you, get rid of it and go back to a basic dumb phone. But even they can spy on you, so better not have any mobile phone. There are far more effective ways to spy on you than with cookies.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

iOS 10.3 Safari cookies won't delete

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.