__AntiXsrfToken cookie: what it does, who sets it, consent category

__AntiXsrfToken cookie

Strictly necessary cookie set by Microsoft, lasting session.

__AntiXsrfToken doesn't need consent. The cookies next to it usually do.

Conzent finds every cookie your site sets, sorts them the way this page does, and holds the ones that need a yes until the visitor gives it.

Try it free for 14 days or self-host it for free

What the __AntiXsrfToken cookie does

This cookie is used to prevent Cross-site request forgery (often abbreviated as CSRF) attacks of the website. CSRF attacks exploit the trust that a site has in a user's browser.

Who sets it

Microsoft — privacy policy

Consent category: strictly necessary

Strictly necessary cookies keep a site working: sessions, security, load balancing and remembering the visitor's consent choice. They are exempt from consent under the ePrivacy rules, but a cookie policy still has to list them.

Name	`__AntiXsrfToken`
Category	Strictly necessary
Lifetime	session
Set by	Microsoft

Other cookies from the same vendor

Is this cookie on your site?

Conzent's scanner lists every cookie your site sets, classifies each one the way this page does, and shows which are set before the visitor has consented. Try Conzent free for 14 days, or look up another cookie.

From the Conzent cookie database, last updated 2026-10-12. Descriptions come from vendor documentation, cookie policies and our own scans; write to support@getconzent.com to correct one.