diff --git a/radicale/__init__.py b/radicale/__init__.py
index edd75005..765c9a24 100644
--- a/radicale/__init__.py
+++ b/radicale/__init__.py
@@ -250,6 +250,8 @@ class Application:
         authorization = request_environ.get("HTTP_AUTHORIZATION", "")
         if mask_passwords and authorization.startswith("Basic"):
             request_environ["HTTP_AUTHORIZATION"] = "Basic **masked**"
+        if request_environ.get("HTTP_COOKIE"):
+            request_environ["HTTP_COOKIE"] = "**masked**"
 
         return request_environ