You have to force Magento to use the same cookie domain for both secure and unsecure URLs. You can inspect your sites cookies using the developer tools in the FireFox or chrome browser. This solution was tested on Magento 1.9.2.4
When the Session Cookie Management variables are not set incorrectly Magento may create two "frontend" cookies with different cookie domains. This typically happens during the login process when you have HTTPS (ie. SSL enabled) for the secure URL. Here are workable values for the Session cookie management configuration.
Cookie Life Time: 3600
Cookie Path: /
Cookie Domain : .mydomain.com (The dot prefix is important)
Use HTTP Only : No
Cookie Restriction Mode: No
- In the admin panel go to System -> Configuration -> Web-> Session Cookie Management
- Set the Cookie Management configuration as shown above
- Save the configuration and clear the Magento cache
- Restart your web server to clear the PHP variables in case you made the change directly in MYSQL database
- Clear your browser cache to remove any existing cookies associated with your magento site.
Using the dot prefix on the cookie domain is important to prevent duplicate cookies from being created for the secure URL
Changing the cookie domain will also affect the "adminhtml" cookie used by the Magento back end. Make sure to clear your browser cache to prevent admin login problems.