Cloudflare's security services that protect websites from malicious bots, scrapers, and DDoS attacks.
__cf_bm
Places a secure cookie on end-user devices to support Bot Management and read/filter requests from bots. It is generated independently for each site visited and does not correspond to any user ID in a web application.
30 minutes from the last visit. (In some specific configurations, it can last up to 1 day).
cf_clearance
Stores proof that a user has successfully passed a Cloudflare challenge, ensuring that subsequent requests do not issue additional CAPTCHA or JS challenges. It is strictly tied to the specific user agent, IP address, and session.
30 minutes (default).
