# Cookie banner setup compared: steps and configuration for seven tools

> How many steps CookieYes, Cookiebot, Termly, iubenda, Complianz, OneTrust and Cookiequiet need to go live, from their own docs: scans, blocking, Consent Mode.

Source: https://cookiequiet.com/blog/cookie-banner-setup-compared
Published: 2026-10-21
Publisher: Cookiequiet

Going live with a cookie banner takes between four and nine documented steps with the common tools, but the steps differ in waiting time and manual configuration more than in number. Cookiequiet's How it works page lists six steps and about five minutes from sign-up to a live banner: add the website, review the cookie table the scan fills, design the banner, paste one tag before your other scripts, publish the prefilled policies, keep the consent log. Cookiebot's documentation says the first scan finishes "within 24 hours", OneTrust's that a scan "typically" takes 6 to 24 hours and production changes may take up to 24 hours to cache, and Cookiebot, OneTrust and Complianz describe Google Consent Mode v2 as a setting you configure.

## How do the setups compare?

From each vendor's own setup documentation, read on 21 October 2026. Where a document did not say, the cell says so.

| Tool | Documented steps to go live | How it is installed | First scan | Blocking before consent | Consent Mode v2 |
|---|---|---|---|---|---|
| Cookiequiet | 6 | One script tag, before other scripts | Starts at once, 10 pages on Free | Auto-blocker for about 80 known trackers created by JavaScript; marked scripts and embeds | Switched on in the snippet the dashboard gives you |
| CookieYes | 4 in the setup guide ("in 3 steps"), scan documented separately | Script in the head, before other scripts, or Google Tag Manager | "A few minutes to a few hours" | Automatic for many common scripts; a data attribute or URL pattern for the rest | "By default, the Basic Consent Mode feature should be enabled" |
| Cookiebot | 5 | WordPress plugin, Tag Manager, or script as the first script on the page | "Within 24 hours" | Automatic in the default script; unclassified cookies are not blocked | Default state set manually in the inline method; enabled in the Tag Manager template |
| Termly | 4 after account creation | Snippet in the head; "must be the first script on the page" | Scan Now from the dashboard | Choose Auto Blocker, Tag Manager or manual markup | Per-region toggle or Tag Manager template |
| iubenda | 9, including plan choice | Snippet in the head as the first element, or a plugin | "Usually just a few minutes" | Automatic blocking on by default for new setups, described as experimental | Automatic through auto-blocking, Basic mode by default |
| Complianz | 5 | WordPress plugin and wizard, no script | During the wizard, up to 50 posts | Integrations for known plugins and embeds, Script Center for the rest | Set in the wizard; its simplified guide says the steps need Premium |
| OneTrust | 5, with test and production scripts | Script in the head before any other script; auto-blocking needs it in the page, not a tag manager | "Typically" 6 to 24 hours | Optional auto-blocking setting, or manual category markup, or Tag Manager | Enabled per geolocation rule; defaults set with a template or gtag code |

## What does each setup ask of you?

### Cookiequiet

The six steps on the [How it works](/how-it-works) page: create an account and add the website, after which the first scan starts at once; review the cookie table, which the scan fills with provider, category and purpose; design the banner; paste one tag in the head of every page before your other scripts; check the prefilled policy questionnaire and publish; then keep the proof in the consent log. No plugin or tag-manager configuration is needed. Reject all sits next to Accept all and cannot be removed in the configuration, and Consent Mode v2 is switched on in the snippet the dashboard gives you.

### CookieYes

The setup guide's order: choose layout, language and theme (or skip with defaults), optionally customise the consent template, geo-targeting and expiry, choose manual installation or Tag Manager, then copy the code "between the head tags" before other scripts. Scanning is a separate Cookie Manager action. Scripts it does not recognise need a `data-cookieyes` attribute or a URL pattern.

### Cookiebot

Add the domain and choose the legislations, wait for the scan, configure the banner, install through the plugin, Tag Manager or embed code as the first script on the page, then classify unclassified cookies from the monthly reports. Its install-time article says installation "usually only takes a few minutes", but the inventory depends on the first scan. New banners default to "Reject all / Selection / Allow all" in the Swift configuration article.

### Termly

Run a scan and classify cookies, customise the banner, paste the snippet in the head, verify, and choose one of three blocking methods. Termly warns that skipping blocking "could mean you are not in compliance".

### iubenda

The most guided: enter the URL, language and site category, run the scan, review its report, follow the assisted configuration for laws, consent and policies, choose a plan, generate the banner and paste it first in the head. One setting to check: its advanced configuration guide documents the Reject button as hidden by default, while noting that the configurator's output may differ. See the [Reject all guide](/guides/reject-all-button).

### Complianz

Install and activate the plugin after your other plugins, run the wizard when the site is ready, clear cookies and disable ad blockers before its scan, customise the banner, empty the cache. On WordPress there is no script to paste, which is a real advantage for WordPress-only sites; see the [WordPress guide](/platforms/wordpress) for both approaches.

### OneTrust

Scan the site, categorise cookies, create banner and preference-centre templates, create a geolocation rules group, publish a test script, then a production script, and republish after every change. Consent Mode v2 is enabled per geolocation rule, with defaults set through a Tag Manager template or hand-written gtag code placed before Google's tags.

## Do fewer steps mean a better setup?

Not by themselves. Cookiebot's and OneTrust's waits come from crawling every URL, which finds more on large sites with varied third parties; Cookiequiet's Free scan reads 10 pages, Starter and Pro 50, and names cookies from a database of about 80 providers. Cookiequiet also has an honest limit: a tracker hard-coded in the HTML before its script, without marking, runs before it can stop it, so the install guides say to load the tag first and to mark or move such tags (see [blocking scripts until consent](/guides/block-scripts-until-consent)).

What matters after setup is the same everywhere: nothing non-essential before the click, Reject all on the first screen, and [Consent Mode v2](/guides/google-consent-mode-v2) defaults set to denied before Google's tags run. The free [cookie scanner](/tools/cookie-scanner) checks the first of these on up to five pages, whichever tool you install.

## Questions

### How long does it take to set up a cookie banner?

Cookiequiet's How it works page counts about five minutes from sign-up to a live banner. Cookiebot's documentation says installation usually takes a few minutes but the first scan finishes within 24 hours, and OneTrust's says a scan typically takes 6 to 24 hours, with production changes taking up to 24 hours to cache.

### Which cookie banner needs no code?

On WordPress, plugins such as Complianz install without pasting a script. Hosted tools, Cookiequiet included, need one script tag in the head of the site, which most site builders accept in a settings field without editing code.

### Do I need Google Tag Manager to set up Consent Mode v2?

Not with every tool. Cookiequiet sets the Consent Mode defaults from its own snippet, and iubenda handles it through its auto-blocking. Cookiebot's inline method and OneTrust ask you to set the default state yourself, through a Tag Manager template or gtag code.

## Sources

- [CookieYes, setup guide](https://www.cookieyes.com/documentation/cookieyes-setup-guide/)
- [CookieYes, website scanning and how it works](https://www.cookieyes.com/documentation/website-scanning-and-how-it-works/)
- [CookieYes, automatic script blocking](https://www.cookieyes.com/documentation/automatic-script-blocking/)
- [CookieYes, implementing Google Consent Mode](https://www.cookieyes.com/documentation/implementing-google-consent-mode-using-cookieyes/)
- [Cookiebot, Getting started using the Admin Interface](https://support.cookiebot.com/hc/en-us/articles/10052255158812-Getting-started-using-the-Admin-Interface)
- [Cookiebot, How long does it take to install Cookiebot?](https://support.cookiebot.com/hc/en-us/articles/360005319034)
- [Cookiebot, Implementing Google Consent Mode](https://support.cookiebot.com/hc/en-us/articles/360016047000)
- [Cookiebot, Configuration of the Swift banner](https://support.cookiebot.com/hc/en-us/articles/4403348431506)
- [Termly, How to install your consent banner](https://support.termly.io/hc/en-us/articles/30710498593297)
- [Termly, How to block third-party scripts and cookies](https://support.termly.io/hc/en-us/articles/30710503833489-How-to-block-third-party-scripts-and-cookies)
- [iubenda, First steps with iubenda](https://www.iubenda.com/en/help/156050-first-steps-with-iubenda/)
- [iubenda, Prior blocking of cookies: automatic blocking](https://www.iubenda.com/en/help/133036-prior-blocking-of-cookies-automatic-blocking-auto-blocking-2/)
- [iubenda, advanced configuration guide](https://www.iubenda.com/en/help/1205-how-to-configure-your-cookie-solution-advanced-guide)
- [Complianz, when to configure the Complianz Privacy Suite](https://complianz.io/when-to-configure-the-complianz-privacy-suite/)
- [Complianz, Simplified Guide to Google Consent Mode v2](https://complianz.io/simplified-guide-to-google-consent-mode-v2/)
- [Complianz on WordPress.org](https://wordpress.org/plugins/complianz-gdpr/)
- [OneTrust, Getting Started with Cookie Consent](https://my.onetrust.com/articles/en_US/Knowledge/UUID-66a9aada-d478-2b61-75f8-1e0caa1fc4cb)
- [OneTrust, Scanning a Website](https://my.onetrust.com/articles/en_US/Knowledge/UUID-49bd8301-a150-6107-7409-de3297816efa)
- [OneTrust, Publishing and Implementing Cookie Consent Scripts](https://my.onetrust.com/articles/en_US/Knowledge/UUID-7478d3b4-18eb-3ac0-a6fd-fb7ebff9f8dc)
- [OneTrust, Cookie Auto-Blocking](https://my.onetrust.com/articles/en_US/Knowledge/UUID-cdb2fcad-1640-fdbd-e432-73c5536f0bbd)
- [OneTrust, Cookie Consent Integration with Google Consent Mode](https://my.onetrust.com/articles/en_US/Knowledge/UUID-d81787f6-685c-2262-36c3-5f1f3369e2a7)