1.Cookies do not require any server resources since they are stored on the client.
2. Cookies are easy to implement.
3. Cookies to expire when the browser session ends (session cookies) or they can exist for a specified length of time on the computer (persistent cookies).
1. Users can delete a cookies.
3. Cookies exist as plain text on the client machine and they may security risk as anyone can open and tamper with cookies.