What I regard as a major security issue regarding cookies from a randomly generated identifier which immediately reappear as soon as I delete them

Description of the issue: - I today I found 3 cookies from an identifier ghmbeldphafepmbegfdlkpapahbakde. Realising that this is a randomly generated identifier I was concerned and deleted immediately, then it came back…and so it has gone on through the whole day with me deleting and it reloading immediately. I am very concerned and would be grateful for your earliest advice as to whether I have a major security issue.
Steps to Reproduce (add as many as necessary): 1. 2. 3.

Actual Result (gifs and screenshots are welcome!):

Expected result: Advice as to what may be causing this and whether I have a security issue.

Reproduces how often: As soon as I delete the cookies, they reappear.

Operating System and Brave Version(See the About Brave page in the main menu): MacOS 15.5 (24F74), Brave version Brave 1.79.119 (Official Build) (arm64)
Additional Information:

@DOW

Please edit your Original Post (“OP”) above, in order to remove the line:

<---------Delete this line and everything above before posting---------->

and everything ABOVE that line.

Your concern about “ghmbeldphafepmbegfdlkpapahbakde” . . . such a string of characters may be a Brave Browser Component or an extension ← that you may have added → In a Brave Browser New Window, go to: brave://extensions and see if some extension has that “ghmbeldphafepmbegfdlkpapahbakde” character string as its ID?

On your Mac, using the Finder, locate the “BraveSoftware” folder at: /Users/[username]/Library/Application Support/BraveSoftware ← Search therein (all levels of sub-folders), for a folder named “ghmbeldphafepmbegfdlkpapahbakde” ← it may be some obscure sub-folder, somewhere.

Brave Browser Components have similar names, and those components’ folder names, you will see in the “Brave-Browser” folder at: /Users/[username]/Library/Application Support/BraveSoftware/Brave-Browser/ Example:

Hi, SO very grateful for your response and expertise; this has rather unnerved me. I am recalling more about when it began, I was loading a PW manager extension from an online security and privacy company from which I have a number of products. The page which came up to show me it was loaded and functioning included a YoutTube screenshot and link to show me how to use the capability. I did not open it, but the cookies appeared thereafter and, upon clicking on the icon, it ways they are three cookies from youTube “partitioned”. I have just deleted the extension, but still the cookies keep loading as soon as I delete them.

Any ideas??? As I say, very concerned about this and hugely grateful for advice.

DOW

@DOW

In a Brave Browser New Window, go to: brave://settings/clearBrowserData and for each of the 3 tabs (Basic, Advanced, On exit), clear cache and cookies. For the Basic and Advanced tabs, be sure to clear for All time.

You must click on the Delete data button or Save button (if it shows), in order to save the settings. You can always return later, and adjust the settings as you wish.


And then exit / quit everything, and Restart your computer.


You can use the Brave Browser > Developer Tools > Application [tab ← sort of] window in order to monitor sources of cookies. In order to display Developer Tools, use key combination of Command + Option + I ← that is letter “I”. In the window, over on the left, see Cookies.

Some websites will send a lot of cookies to an Internet application. You may have the option to delete cookies (remove them, block them) . . . and sometimes, you may not be able to keep cookies (not able to maintain their keep, aboard an Internet application). A lot of Internet application users, are unaware that the website also has a say in it ← meaning, they DO NOT want the visitor to remain logged in!


You may also click on the Tune icon
Screenshot 2025-06-05 at 2.23.37 PM
and scroll down to Cookies and site data to seem more, re Cookies.


Re YouTube, I have more luck, using Brave Browser Private Browsing (Private Windows). I do not have a Google eco-system account (no YouTube account, for example) and that may be why I have less troubles with YouTube visits.

1 Like

Hi 289wk,

I have done as you directed and, YEAAA, upon reopening Brave there was nothing in the cooky jar, no cookies at all.

I shall now get down to revisiting my usual sites and logging in etcetera again.

Probably almost comical to an expert such as yourself, but I am about as far from that as you can imagine and this caught me by surprise, “got inside my head”.

I am immensely grateful to you for your time and expertise.

DOW

1 Like

@DOW

You are OK. I am not an expert. Just a fellow member of the Brave Community - where I try to help.

Expert or not I am really, immensely grateful to you.

I have clicked the “heart” at the bottom of your reply, which is all I think I am able to do to register my gratitude.

Many thanks.

1 Like

@DOW

Remember to edit your OP ← as I previously noted. Thanks. And, when you are stuck at an airport or the car shop or the dentist, some reading:

Brave Browser Development

About Chromium - somewhere online, a few years ago, I found:

“Intrinsically, Chromium is a Google project maintained by many authors (developers, engineers, graphic designers, security researchers … ) from Google, Adobe, Amazon, ARM, Brave, Cloudflare, Facebook, Hewlett-Packard, IBM, Igalia, Intel, Logitech, Microsoft, Mozilla, Nvidia, Opera, Samsung, Vivaldi, Xiaomi, Yandex … and external contributors.”

Chromium is not only a web browser. It is a blend of different important open-source projects:

Deviations from Chromium (features Brave disables or removes)

Chromium source is fetched

Brave code is fetched

Hooks are run

What Chromium features are removed for privacy/security reasons?

Services & Features We Disable Entirely:


https://support.brave.com/hc/en-us/articles/29808985123085-Sensitive-data-storage


Advanced Privacy - A long list of Brave’s behind-the-scenes protections and commitments.

https://brave.com/privacy-features/


Brave’s advanced protections. Built right into the browser.

https://brave.com/privacy-features/#advanced-expanded-accordion


Brave’s policy, compliance, and research commitments.

https://brave.com/privacy-features/#policies-expanded-accordion