Security & Safeguards · Company practice
Authentication and encrypted session identifier cookies
Surfshark lists five first-party cookies for sessions and authentication: surfshark-uuid (1 year, maintains an encrypted session identifier, Functional), _ssli (13 months, maintains authenticated session settings, Functional), _sstk and _ssrtk (1 year each, used for authentication purposes, Essential) and _ssexp (2 hours, used for authentication purposes, Essential).
Supporting quotations
surfshark-uuid 1 year Surfshark Maintains an encrypted session identifier Functional
_ssli 13 months Surfshark Maintains authenticated session settings Functional
_sstk 1 year Surfshark Used for authentication purposes Essential
_ssrtk 1 year Surfshark Used for authentication purposes Essential
_ssexp 2 hours Surfshark Used for authentication purposes Essential
Qualifications & exceptions
- Expiry, purpose and category are as listed for each cookie; the Essential and Functional labels are the table's own.
Not stated here
- The table does not explain what each authentication cookie contains beyond the stated purpose.