HAR File Redactor
Redact cookies, authorization headers, tokens, emails, and secrets from HAR JSON before sending it to support.
Also useful for: har file redactor har redaction tool redact har secrets network log redactor HAR File Redactor
HAR File Redactor
Runs in your browser. Inputs are not uploaded.HAR File Redactor Example Run
Remove obvious secrets from a HAR export before support review.
Sample inputs
{"log":{"entries":[{"request":{"method":"GET","url":"https://api.example.com/users?email=ada@example.com","headers":[{"name":"Authorization","value":"Bearer eyJsecret.token.value"}],"cookies":[{"name":"session","value":"abc123"}]},"response":{"status":200},"time":123}]}}
Generated result
Summary: 1 HAR entry redacted.
Stats
- Entries: 1
Issues
- Note: Headers, cookies, tokens, passwords, and common API keys were redacted recursively.
Output
{
"log": {
"entries": [
{
"request": {
"method": "GET",
"url": "https://api.example.com/users?email=[REDACTED_EMAIL]",
"headers": [
{
"name": "Authorization",
"value": "Bearer [REDACTED_TOKEN]"
}
],
"cookies": "[REDACTED]"
},
"response": {
"status": 200
},
"time": 123
}
]
}
} What the HAR File Redactor Checks
-
HAR JSON parsing
The file must parse as JSON before structured redaction can be applied.
-
Recursive secret fields
Headers, cookies, passwords, tokens, and API-key-like values are redacted throughout the object.
-
Entry count
The report counts log.entries so you know whether the input looked like a normal HAR export.
-
Fallback redaction
If log.entries is missing, the JSON is still redacted recursively and flagged for review.
-
Human review reminder
Automated redaction is conservative but should still be checked before external sharing.
HAR File Redactor Questions
- Q: Does the HAR file redactor upload my HAR file? A: No. Inputs are processed in your browser, and pasted content is not sent to analytics or a server.
- Q: What should I paste into the HAR file redactor? A: Paste HAR JSON exported from browser DevTools or another network capture tool.
- Q: What can I copy or download? A: You can download the redacted HAR or copy the redaction report.
- Q: What does the HAR file redactor not verify? A: It does not guarantee removal of every proprietary token format, inspect binary bodies, or prove the remaining data is safe to publish.
Related Tools
Updates
- v1.0.0 New 2026-05-17: Initial HAR JSON redaction for headers, cookies, tokens, and emails added.