What is the `.ASPXAUTH` cookie?no consent needed

Set by ASP.NET (The website (Microsoft ASP.NET)). Expires after Session or configured lifetime.

Strictly necessary — it can load freely

Cookies essential to the service are exempt from consent under ePrivacy Art. 5(3) — but .ASPXAUTH must still be disclosed in your cookie policy.

Purpose

Forms-authentication ticket that keeps the visitor signed in.

Cookie details

Cookie name: .ASPXAUTH
Service: ASP.NET
Provider: The website (Microsoft ASP.NET)
Category: Strictly Necessary
Duration: Session or configured lifetime
Consent: Not required

GDPR requirements

Strictly necessary cookies are essential for the website to function and cannot be switched off. They are set only in response to actions made by you — such as logging in or filling forms. No consent is required.

For .ASPXAUTH to be compliant, it must be:

May be set as soon as the visitor arrives — no consent needed
Still disclosed in your cookie policy, with what it does and why it is necessary
Not shown as a toggle in your consent banner

How to handle it

1
Let it load freely
No consent gate is needed for this cookie.
2
Disclose it
List it in your cookie policy as strictly necessary for ASP.NET.
3
Keep it out of the toggles
Strictly necessary cookies shouldn't be switchable in your consent UI.

Other ASP.NET cookies

ASP.NET_SessionId

Strictly NecessarySession

__RequestVerificationToken