Is it generally okay to retain cookies for sites that I trust?

Questions
1

I have my Brave browser configured pretty much as recommended on here. I have Forget Me turned on for every site except for banking sites, since they already know who I am (and I’ve already been locked out of a bank account once for having to log in from “new devices” so many times).

For other sites, such as Proton Mail though, is there any harm to remaining logged in so that I don’t have to enter username/password/2FA every single time I want to get into it? I know that there would probably be harm if I did that with something like Gmail, but I’m more focused on my privacy focused stuff now anyways, and I use Mullvad for all generic searching.

2

To answer your titular question: yes it is. No harm is ensuring you’re signed in to the sites you have to everyday or that you like. I have a few myself.

1 Like
3

Well there’s a risk of session cookies being stolen in case of an attack like the one that had Linus YouTube channel owned.
So if you are logged in you could potentially been exposed.

Using pwa could maybe mitigate this and the best protection is using a hw security key.

1 Like