How to use HAR Viewer and Redactor

Choose a HAR file or paste its JSON; a chosen file takes precedence.
Run inspection and review request rows and the reduced export.
Search the downloaded HAR for information you still consider sensitive before sharing it.

Example: HAR Viewer and Redactor

Remove a query-token value from a minimal synthetic HAR.

You add

Paste: {"log":{"version":"1.2","creator":{"name":"Example","version":"1"},"entries":[{"startedDateTime":"2026-01-01T00:00:00Z","time":10,"request":{"method":"GET","url":"https://example.com/path?token=sample-secret","httpVersion":"HTTP/1.1","headers":[],"cookies":[],"queryString":[],"headersSize":-1,"bodySize":0},"response":{"status":200,"statusText":"OK","httpVersion":"HTTP/1.1","headers":[],"cookies":[],"content":{"size":0,"mimeType":"text/plain"},"redirectURL":"","headersSize":-1,"bodySize":0},"cache":{},"timings":{"send":1,"wait":8,"receive":1}}]}}

You get

The reduced HAR omits sample-secret while retaining the host, /path, query name token, status 200 and timing. Review remaining details before sharing.

Supported inputs and limits

4 MiB and 1,000 requests. Export rebuilds selected standard fields, drops bodies, cookies, URL credentials, fragments, query values, comments, unknown extensions and most headers. Hosts, paths and timings remain and may identify people or systems. This is not complete anonymization; inspect the output before sharing.

Where your input is processed

This tool processes your input in this browser. Your text and files are not uploaded to UseFreeTools. Check this tool's limits for anything it may save on your device.

Redaction removes fields rather than proving anonymity

The reduced file rebuilds allowlisted HAR fields and removes bodies, cookies, query values and many headers. Hostnames, paths, parameter names and timings can still reveal private details. This is an inspection aid, not a promise that every business identifier or sensitive path has disappeared.

The export is a reduced record

Information removed for privacy cannot be recovered from the download. Keep a private original when you need a complete diagnostic record. The tool does not replay requests, fetch the recorded URLs or measure current website performance; it interprets the supplied captured evidence.

Questions about HAR Viewer and Redactor

Are response bodies retained?

No. Request and response body contents are removed.

Is the result anonymous?

No. Hostnames, paths, timings and other retained fields can still identify a system or person.

Does the tool send requests from the HAR?

No. It reads the local JSON without replaying requests.

Project manager: Tony Hines · Content updated 3 October 2026 · Report a problem

HAR Viewer and Redactor

Reduce HAR controls