Is Cookie Extractor safe?

A developer tool for inspecting and verifying session information. Headless automation is increasingly blocked by 2FA QR codes, interactive challenges, and anti-bot flows. This app takes the other road: you log in by hand, exactly like in a normal browser, then one tap pulls the session cookies for the loaded domain and hands them to the Android share sheet, ready for curl, wget, or any script th…

Developer: Paolo Antinori
Category: Development
Earliest archived version: 03 Oct 2026
License: Apache-2.0 (per F-Droid metadata)

02 / Release notes

Release notes from F-Droid

03 Oct 2026

1.1.0

Multi-domain cookie share: collects your session across a configurable list of domains (default: the Google family) and emits one structured JSON document; compound country domains like co.uk are grouped correctly.

Full notes →

03 / Package identity

Technical fingerprint

Application IDcom.cookiesextractor.app

Latest APK SHA-256baa7f8e80d1f6481c0922f14b58df2c5056ba220a84d5b76cbfaa94efb3635da

Signing certificateFF:0C:AF:02:DB:43:5A:9E:97:37:44:FF:BA:BD:4B:E2:4A:69:4C:13:95:F6:63:20:63:D7:BF:84:9D:7C:C5:70

MIN ANDROID24TARGET36ARCHITECTURE

04 / Version archive

Documented releases

1 TOTAL

VersionReleasedAndroidArchitecture

1.1.003 Oct 202624+→

05 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceOpen-source · fdroid

Permissions4 declared · 0 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessNo sensitive permissions

Declared permissions

android.permission.INTERNET android.permission.POST_NOTIFICATIONS android.permission.RECEIVE_BOOT_COMPLETED com.cookiesextractor.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Tracker status: Not assessed by WIKI for Android.

06 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗