Use Your Spotify Cookie on Upgrade and Renew
Orphilia now accepts the Spotify sp_dc session cookie as a credential on the Upgrade and Renew flows. Not a login system, just a different way to prove the Spotify account is yours. Here is what changed, why it matters, and how to use it in 60 seconds.
Until last week, the only way to upgrade or renew through Orphilia was to hand over your Spotify email and password. That worked, and it still works. But it had two problems we kept hearing about in Slack.
A lot of people sign into Spotify with Google or Facebook. They genuinely do not have a password to share, and resetting one just to use Orphilia felt wrong. Other people who did use a password did not love typing it into a website they had never used before. Fair instinct. We respect it.
So we shipped a second option. From today, both the Upgrade and the Renew page accept your sp_dc cookie instead of your password. Same upgrade, same key, same lifetime Premium. Just a different way to prove the account is yours.
What is sp_dc
sp_dc is the session cookie Spotify writes to your browser after you log in. It tells Spotify which account is signed in. By handing it to us for the upgrade window, we can do exactly what you would do logged in, without ever needing your password or your Google or Facebook credentials.
Three things to know about it:
- It works for every Spotify account, including Google and Facebook sign in.
- It is sensitive. Treat it like a password.
- It refreshes every time you log in to Spotify in your browser, so if it ever stops working, just log in again and grab a fresh copy.
How to use it on Orphilia
Go to orphilia.com/upgrade or orphilia.com/renew. Paste your ORPH key as you always have. When the credentials section appears, click the Cookie tab at the top (it carries a small Recommended badge), paste your sp_dc value into the box, pick a country (Upgrade only), and click Upgrade.
That is the whole flow. Country is the only other thing the Upgrade page asks for, and Renew does not ask for a country at all.
How to get your sp_dc value
Two paths, pick whichever you prefer.
The easy way: Cookie-Editor extension
- Install Cookie-Editor. It is free and available for Chrome, Firefox, Edge, and Safari.
- Open spotify.com and log in to the account you want to upgrade.
- Click the Cookie-Editor icon in your browser toolbar, search
sp_dcin the cookie list, copy the value. - Paste it into the
sp_dcbox on Orphilia.
The manual way: browser DevTools
- Open spotify.com and log in.
- Open DevTools.
F12on Windows,Cmd + Option + Ion Mac. - Go to the Application tab (Chrome and Edge) or Storage tab (Firefox).
- Expand Cookies, click
https://www.spotify.com. - Find the row named
sp_dcand copy the Value column. - Paste it into the
sp_dcbox on Orphilia.
AQA and runs roughly 100 to 200 characters. If what you copied looks shorter than that, you probably grabbed the wrong row. Spotify writes a handful of cookies with similar names, so double check the row label.
What we do and do not do with sp_dc
We send it to the upgrade pipeline over HTTPS, the same TLS encrypted connection every page on orphilia.com uses. We do not log it. We do not store it after the job completes. It lives in memory just long enough to finish your upgrade and is cleared immediately afterwards.
If you ever want to invalidate the cookie yourself, log out of Spotify in your browser. That kills the session immediately and any copy of sp_dc you handed out becomes useless.
Should you switch from password to cookie
If the password flow has been working for you, there is no pressure to change. We added the cookie option as a parallel path, not a replacement.
That said, here is where the cookie path genuinely wins:
- Your account uses Google or Facebook sign in and you have no Spotify password.
- You change your Spotify password often and forget the latest one half the time.
- You are uncomfortable typing a password into a third party website (a healthy default to have).
- You hit "wrong credentials" on the password flow even though the password is right (rare, but happens when Spotify rotates auth tokens).
If none of that applies, the password flow stays the simpler choice and we will keep supporting it.
Common questions, answered fast
Is sp_dc safer than my password?
In our flow, yes. Your password is the master key to your account everywhere, on every device, for every login. sp_dc is just the current browser session and can be invalidated in one click by logging out. If you ever feel like something went wrong, kill the session and you are done.
Why does Orphilia recommend it over password?
Because most account access issues we see on Renew come from password mismatches. People change their Spotify password for unrelated reasons, then come back to Renew six months later, type the old password from memory, and watch it fail. Cookie auth sidesteps all of that. It is just whatever is in your browser right now.
Does it work on the Spotify mobile app cookie?
No. Mobile apps do not expose cookies the same way browsers do. Open spotify.com in a desktop browser to grab sp_dc, then go back to your phone or laptop to finish on Orphilia. The cookie itself works across any device once pasted.
What if sp_dc stops working halfway through?
It will not, in practice. The upgrade window is short and we finish before any reasonable session timeout. If something does go wrong, Renew gives the key back to you and you can try again with a fresh copy of the cookie.