Skip to content

Sec-Fetch-Storage-Access

Indicates the “storage access status” for the current fetch context, which will be one of none, inactive, or active. The server may respond with Activate-Storage-Access to request that the browser activate an inactive permission and retry the request, or to load a resource with access to its third-party cookies if the status is active.

The Sec-Fetch-Storage-Access HTTP header is a specialized field used to indicates the “storage access status” for the current fetch context, which will be one of none, inactive, or active. The server may respond with Activate-Storage-Access to request that the browser activate an inactive permission and retry the request, or to load a resource with access to its third-party cookies if the status is active. It acts as a signaling mechanism between the client and the server to enforce policies, negotiate capabilities, or provide telemetry data during the transmission of requests and responses.

This header is primarily utilized when the client or browser needs to declare its context or capabilities prior to establishing the transaction. Modern web applications rely on this to maintain state and context.

It facilitates seamless programmatic integration by ensuring both the client and server agree on the terms of the transaction, greatly improving performance, security, and rendering correctness without manual user intervention.

Implement or parse this header within your application’s network layer (such as an Express middleware or a Next.js edge function) by reading or attaching the key-value pair:

Sec-Fetch-Storage-Access: <appropriate-value>
Sec-Fetch-Storage-Access: <value>